Update module go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin to v0.44.0 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin	v0.13.0 -> v0.44.0

GitHub Vulnerability Alerts

CVE-2023-45142

Summary

This handler wrapper https://github.com/open-telemetry/opentelemetry-go-contrib/blob/5f7e6ad5a49b45df45f61a1deb29d7f1158032df/instrumentation/net/http/otelhttp/handler.go#L63-L65
out of the box adds labels

• http.user_agent
• http.method

that have unbound cardinality. It leads to the server's potential memory exhaustion when many malicious requests are sent to it.

Details

HTTP header User-Agent or HTTP method for requests can be easily set by an attacker to be random and long. The library internally uses httpconv.ServerRequest that records every value for HTTP method and User-Agent.

PoC

Send many requests with long randomly generated HTTP methods or/and User agents (e.g. a million) and observe how memory consumption increases during it.

Impact

In order to be affected, the program has to configure a metrics pipeline, use otelhttp.NewHandler wrapper, and does not filter any unknown HTTP methods or User agents on the level of CDN, LB, previous middleware, etc.

Others

It is similar to already reported vulnerabilities

• GHSA-5r5m-65gx-7vrh (open-telemetry/opentelemetry-go-contrib)
• GHSA-cg3q-j54f-5p7p (prometheus/client_golang)

Workaround for affected versions

As a workaround to stop being affected otelhttp.WithFilter() can be used, but it requires manual careful configuration to not log certain requests entirely.

For convenience and safe usage of this library, it should by default mark with the label unknown non-standard HTTP methods and User agents to show that such requests were made but do not increase cardinality. In case someone wants to stay with the current behavior, library API should allow to enable it.

The other possibility is to disable HTTP metrics instrumentation by passing otelhttp.WithMeterProvider option with noop.NewMeterProvider.

Solution provided by upgrading

In PR https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277, released with package version 0.44.0, the values collected for attribute http.request.method were changed to be restricted to a set of well-known values and other high cardinality attributes were removed.

References

• https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
• https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.19.0

---

Release Notes

open-telemetry/opentelemetry-go-contrib (go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin)

v0.24.0

Compare Source

0.24.0 - 2021-09-21

Update dependency on the go.opentelemetry.io/otel project to v1.0.0.

v0.23.0

Compare Source

0.23.0 - 2021-09-09

Added

• Add WithoutSubSpans, WithRedactedHeaders, WithoutHeaders, and WithInsecureHeaders options for otelhttptrace.NewClientTrace. (#​879)

Changed

• Split go.opentelemetry.io/contrib/propagators module into b3, jaeger, ot modules. (#​985)
• otelmongodb span attributes, name and span status now conform to specification. (#​769)
• Migrated EC2 resource detector support from root module go.opentelemetry.io/contrib/detectors/aws to a separate EC2 resource detector module go.opentelemetry.io/contrib/detectors/aws/ec2 (#​1017)
• Add cloud.provider and cloud.platform to AWS detectors. (#​1043)
• otelhttptrace.NewClientTrace now redacts known sensitive headers by default. (#​879)

Fixed

• Fix span not marked as error in otelhttp.Transport when RoundTrip fails with an error. (#​950)

v0.22.0

Compare Source

Added

• Add the zpages span processor. (#​894)

Changed

• The b3.B3 type has been removed.
  b3.New() and b3.WithInjectEncoding(encoding) are added to replace it. (#​868)

Fixed

• Fix deadlocks and race conditions in otelsarama.WrapAsyncProducer.
  The messaging.message_id and messaging.kafka.partition attributes are now not set if a message was not processed. (#​754) (#​755) (#​881)
• Fix otelsarama.WrapAsyncProducer so that the messages from the Errors channel contain the original Metadata. (#​754)

v0.21.0

Compare Source

0.21.0 - 2021-06-18

Fixed

• Dockerfile based examples for otelgin and otelmacaron. (#​767)

Changed

• Supported minimum version of Go bumped from 1.14 to 1.15. (#​787)
• EKS Resource Detector now use the Kubernetes Go client to obtain the ConfigMap. (#​813)

Removed

• Remove service name from otelmongodb configuration and span attributes. (#​763)

v0.20.0

Compare Source

Changed

• The go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo instrumentation now accepts a WithCommandAttributeDisabled,
  so the caller can specify whether to opt-out of tracing the mongo command. (#​712)
• Upgrade to v0.20.0 of go.opentelemetry.io/otel. (#​758)
• The B3 and Jaeger propagators now store their debug or deferred state in the context.Context instead of the SpanContext. (#​758)

---

Raw changes made between v0.19.0 and v0.20.0

0e5bef9 (HEAD -> main, tag: v0.20.0, tag: propagators/v0.20.0, tag: propagators/opencensus/v0.20.0, tag: propagators/opencensus/examples/v0.20.0, tag: propagators/aws/v0.20.0, tag: instrumentation/runtime/v0.20.0, tag: instrumentation/runtime/example/v0.20.0, tag: instrumentation/net/http/otelhttp/v0.20.0, tag: instrumentation/net/http/otelhttp/example/v0.20.0, tag: instrumentation/net/http/httptrace/otelhttptrace/v0.20.0, tag: instrumentation/net/http/httptrace/otelhttptrace/example/v0.20.0, tag: instrumentation/host/v0.20.0, tag: instrumentation/host/example/v0.20.0, tag: instrumentation/gopkg.in/macaron.v1/otelmacaron/v0.20.0, tag: instrumentation/gopkg.in/macaron.v1/otelmacaron/example/v0.20.0, tag: instrumentation/google.golang.org/grpc/otelgrpc/v0.20.0, tag: instrumentation/google.golang.org/grpc/otelgrpc/example/v0.20.0, tag: instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo/v0.20.0, tag: instrumentation/github.com/labstack/echo/otelecho/v0.20.0, tag: instrumentation/github.com/labstack/echo/otelecho/example/v0.20.0, tag: instrumentation/github.com/gorilla/mux/otelmux/v0.20.0, tag: instrumentation/github.com/gorilla/mux/otelmux/example/v0.20.0, tag: instrumentation/github.com/gocql/gocql/otelgocql/v0.20.0, tag: instrumentation/github.com/gocql/gocql/otelgocql/example/v0.20.0, tag: instrumentation/github.com/go-kit/kit/otelkit/v0.20.0, tag: instrumentation/github.com/go-kit/kit/otelkit/example/v0.20.0, tag: instrumentation/github.com/gin-gonic/gin/otelgin/v0.20.0, tag: instrumentation/github.com/gin-gonic/gin/otelgin/example/v0.20.0, tag: instrumentation/github.com/emicklei/go-restful/otelrestful/v0.20.0, tag: instrumentation/github.com/emicklei/go-restful/otelrestful/example/v0.20.0, tag: instrumentation/github.com/bradfitz/gomemcache/memcache/otelmemcache/v0.20.0, tag: instrumentation/github.com/bradfitz/gomemcache/memcache/otelmemcache/example/v0.20.0, tag: instrumentation/github.com/aws/aws-sdk-go-v2/otelaws/v0.20.0, tag: instrumentation/github.com/aws/aws-sdk-go-v2/otelaws/example/v0.20.0, tag: instrumentation/github.com/astaxie/beego/otelbeego/v0.20.0, tag: instrumentation/github.com/astaxie/beego/otelbeego/example/v0.20.0, tag: instrumentation/github.com/Shopify/sarama/otelsarama/v0.20.0, tag: instrumentation/github.com/Shopify/sarama/otelsarama/example/v0.20.0, tag: exporters/metric/dogstatsd/v0.20.0, tag: exporters/metric/datadog/v0.20.0, tag: exporters/metric/cortex/v0.20.0, tag: exporters/metric/cortex/utils/v0.20.0, tag: exporters/metric/cortex/example/v0.20.0, tag: detectors/gcp/v0.20.0, tag: detectors/aws/v0.20.0, tag: detectors/aws/eks/v0.20.0, tag: detectors/aws/ecs/v0.20.0, upstream/main, origin/main) Release v0.20.0 (#​758)
4d6b37e update grpc example commands (#​756)
7b51f7a Bump github.com/emicklei/go-restful/v3 from 3.5.0 to 3.5.1 in /instrumentation/github.com/emicklei/go-restful/otelrestful (#​753)
8db2eae Bump actions/cache from v2.1.4 to v2.1.5 (#​752)
57cfdfc Bump github.com/aws/aws-sdk-go from 1.38.17 to 1.38.21 in /detectors/aws (#​751)
e1a7c47 Bump github.com/emicklei/go-restful/v3 (#​745)
b82a9a1 Bump github.com/labstack/echo/v4 from 4.2.1 to 4.2.2 in /instrumentation/github.com/labstack/echo/otelecho (#​737)
960b296 Bump github.com/gin-gonic/gin from 1.6.3 to 1.7.1 in /instrumentation/github.com/gin-gonic/gin/otelgin (#​736)
ac15859 Bump google.golang.org/grpc from 1.36.1 to 1.37.0 in /instrumentation/google.golang.org/grpc/otelgrpc (#​740)
988a57d Bump github.com/emicklei/go-restful/v3 from 3.4.0 to 3.5.0 in /instrumentation/github.com/emicklei/go-restful/otelrestful (#​735)
892d7f9 Bump github.com/aws/aws-sdk-go from 1.38.12 to 1.38.17 in /detectors/aws (#​734)
5b82c08 Add WithCommandLoggingDisabled to otelmongo tracer (#​723)
ae2c628 otelhttp: handle nil base http transport (#​713)
e8c2192 Bump github.com/golang/protobuf from 1.5.1 to 1.5.2 in /instrumentation/google.golang.org/grpc/otelgrpc (#​730)
e416457 Bump go.mongodb.org/mongo-driver (#​731)
3e90802 Bump cloud.google.com/go from 0.80.0 to 0.81.0 in /detectors/gcp (#​729)
13ba41f Bump github.com/golang/protobuf (#​728)
4c3fcb8 Bump github.com/aws/aws-sdk-go from 1.38.7 to 1.38.12 in /detectors/aws (#​727)
2760096 fix import link (#​724)
0b89c82 Bump github.com/golangci/golangci-lint from 1.38.0 to 1.39.0 in /tools (#​717)
ec6d93d Bump cloud.google.com/go from 0.79.0 to 0.80.0 in /detectors/gcp (#​716)
8d7211f Bump github.com/aws/aws-sdk-go from 1.38.1 to 1.38.7 in /detectors/aws (#​715)
0cca425 Bump google.golang.org/grpc from 1.36.0 to 1.36.1 in /instrumentation/google.golang.org/grpc/otelgrpc (#​718)
5ec7f3c fix cortex example code (#​722)
a51c8df Update project approvers (#​721)
9d0d9d9 support aws sdk go for v2 instrumentation (#​621)
c332299 Update InjectEncoding doc for B3 (#​710)
09e3a12 Bump github.com/golang/protobuf from 1.4.3 to 1.5.1 in /instrumentation/google.golang.org/grpc/otelgrpc (#​681)
454823f Bump github.com/aws/aws-sdk-go from 1.37.30 to 1.38.1 in /detectors/aws (#​708)

v0.19.0

Compare Source

Changed

• Upgrade to v0.19.0 of go.opentelemetry.io/otel.

---

Raw changes made between v0.18.0 and v0.19.0

e78bad2 (tag: v0.19.0, tag: propagators/v0.19.0, tag: propagators/opencensus/v0.19.0, tag: propagators/opencensus/examples/v0.19.0, tag: propagators/aws/v0.19.0, tag: instrumentation/runtime/v0.19.0, tag: instrumentation/runtime/example/v0.19.0, tag: instrumentation/net/http/otelhttp/v0.19.0, tag: instrumentation/net/http/otelhttp/example/v0.19.0, tag: instrumentation/net/http/httptrace/otelhttptrace/v0.19.0, tag: instrumentation/net/http/httptrace/otelhttptrace/example/v0.19.0, tag: instrumentation/host/v0.19.0, tag: instrumentation/host/example/v0.19.0, tag: instrumentation/gopkg.in/macaron.v1/otelmacaron/v0.19.0, tag: instrumentation/gopkg.in/macaron.v1/otelmacaron/example/v0.19.0, tag: instrumentation/google.golang.org/grpc/otelgrpc/v0.19.0, tag: instrumentation/google.golang.org/grpc/otelgrpc/example/v0.19.0, tag: instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo/v0.19.0, tag: instrumentation/github.com/labstack/echo/otelecho/v0.19.0, tag: instrumentation/github.com/labstack/echo/otelecho/example/v0.19.0, tag: instrumentation/github.com/gorilla/mux/otelmux/v0.19.0, tag: instrumentation/github.com/gorilla/mux/otelmux/example/v0.19.0, tag: instrumentation/github.com/gocql/gocql/otelgocql/v0.19.0, tag: instrumentation/github.com/gocql/gocql/otelgocql/example/v0.19.0, tag: instrumentation/github.com/go-kit/kit/otelkit/v0.19.0, tag: instrumentation/github.com/go-kit/kit/otelkit/example/v0.19.0, tag: instrumentation/github.com/gin-gonic/gin/otelgin/v0.19.0, tag: instrumentation/github.com/gin-gonic/gin/otelgin/example/v0.19.0, tag: instrumentation/github.com/emicklei/go-restful/otelrestful/v0.19.0, tag: instrumentation/github.com/emicklei/go-restful/otelrestful/example/v0.19.0, tag: instrumentation/github.com/bradfitz/gomemcache/memcache/otelmemcache/v0.19.0, tag: instrumentation/github.com/bradfitz/gomemcache/memcache/otelmemcache/example/v0.19.0, tag: instrumentation/github.com/astaxie/beego/otelbeego/v0.19.0, tag: instrumentation/github.com/astaxie/beego/otelbeego/example/v0.19.0, tag: instrumentation/github.com/Shopify/sarama/otelsarama/v0.19.0, tag: instrumentation/github.com/Shopify/sarama/otelsarama/example/v0.19.0, tag: exporters/metric/dogstatsd/v0.19.0, tag: exporters/metric/datadog/v0.19.0, tag: exporters/metric/cortex/v0.19.0, tag: exporters/metric/cortex/utils/v0.19.0, tag: exporters/metric/cortex/example/v0.19.0, tag: detectors/gcp/v0.19.0, tag: detectors/aws/v0.19.0, tag: detectors/aws/eks/v0.19.0, tag: detectors/aws/ecs/v0.19.0, upstream/main) Release v0.19.0 (#​624)
ef90356 Use SingleHeader format for unspecified B3 inject encoding (#​614)
7a8e6f5 Bump github.com/labstack/echo/v4 from 4.2.0 to 4.2.1 in /instrumentation/github.com/labstack/echo/otelecho (#​617)
542f258 Bump github.com/aws/aws-sdk-go from 1.37.25 to 1.37.30 in /detectors/aws (#​616)
a12fd56 Bump github.com/aws/aws-sdk-go from 1.37.24 to 1.37.25 in /detectors/aws (#​608)
3fcec94 Add docs on when reviews should be cleared (#​583)
542d974 Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 in /detectors/gcp (#​607)
e5c4835 Bump github.com/aws/aws-sdk-go from 1.37.20 to 1.37.24 in /detectors/aws (#​605)
e438852 Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 in /propagators/opencensus (#​604)
1b4820c Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 in /exporters/metric/cortex (#​603)
c4d426f Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 in /propagators (#​602)
d953e15 Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 in /instrumentation/net/http/httptrace/otelhttptrace (#​601)
384173e Bump github.com/golangci/golangci-lint from 1.37.1 to 1.38.0 in /tools (#​606)
cc31f43 Add go-kit instrumentation library (#​456)

v0.18.0

Compare Source

Fixed

• otelmemcache no longer sets span status to OK instead of leaving it unset. (#​477)
• Fix goroutine leak in gRPC StreamClientInterceptor. (#​581)

Removed

• Remove service name from otelmemcache configuration and span attributes. (#​477)

Raw changes made between v0.17.0 and v0.18.0

839e505 Bumping otel version to v0.18.0. Prepare for releasing v0.18.0 (#​600)
f82555b Bump google.golang.org/grpc from 1.35.0 to 1.36.0 in /instrumentation/google.golang.org/grpc/otelgrpc (#​594)
8fb6eb1 Bump google.golang.org/grpc (#​593)
b3b6ccd Bump github.com/aws/aws-sdk-go from 1.37.15 to 1.37.20 in /detectors/aws (#​591)
5783e2d Bump github.com/golang/snappy from 0.0.2 to 0.0.3 in /exporters/metric/cortex (#​592)
3c49aeb Bump cloud.google.com/go from 0.77.0 to 0.78.0 in /detectors/gcp (#​595)
a2de3b6 Bump google.golang.org/grpc in /propagators/opencensus/examples (#​596)
f011c95 Bump github.com/Shopify/sarama from 1.27.2 to 1.28.0 in /instrumentation/github.com/Shopify/sarama/otelsarama (#​588)
598a707 Bump go.uber.org/goleak from 1.1.0 to 1.1.10 in /instrumentation/google.golang.org/grpc/otelgrpc (#​587)
e5fef66 Bump cloud.google.com/go from 0.76.0 to 0.77.0 in /detectors/gcp (#​586)
8334b44 Bump github.com/golangci/golangci-lint from 1.36.0 to 1.37.1 in /tools (#​585)
462580e Bump github.com/aws/aws-sdk-go from 1.37.10 to 1.37.15 in /detectors/aws (#​584)
f875adf Update docs from gitter to slack for communication (#​582)
3349baf otelmemcache: Simplify config and span status setting (#​477)
62c8535 Fix goroutine leak in gRPC StreamClientInterceptor (#​581)
0fe4199 Update AWS detector assert dependency (#​574)

v0.17.0

Compare Source

Update go.opentelemetry.io/otel dependency to v0.17.0

Added

• Add ot-tracer propagator (#​562)

Changed

• Rename project default branch from master to main.

Fixed

• Added failure message for AWS ECS resource detector for better debugging (#​568)

---

Raw changes made between v0.16.0 and v0.17.0

cabeeb5 Bump github.com/labstack/echo/v4 from 4.1.17 to 4.2.0 in /instrumentation/github.com/labstack/echo/otelecho (#​577)
7fe84fd Bump github.com/labstack/echo/v4 (#​578)
8d6e61b Bump github.com/aws/aws-sdk-go from 1.37.6 to 1.37.10 in /detectors/aws (#​576)
bd90f3e Eks resource detector bugfix (#​575)
e532370 (origin/main) Fix ECS resource detector bug (#​569)
b87d221 Bump cloud.google.com/go from 0.75.0 to 0.76.0 in /detectors/gcp (#​572)
957a23c Bump actions/cache from v2 to v2.1.4 (#​571)
e3b511e Bump github.com/aws/aws-sdk-go from 1.37.1 to 1.37.6 in /detectors/aws (#​570)
33003dd Bump go.mongodb.org/mongo-driver (#​573)
cc69f93 added failure message - ECS resource detector (#​568)
fd60b5f Add ot-tracer-* propagator (#​562)
bc8b54d Update default branch name to main (#​567)
e0fb74f Bump github.com/golangci/golangci-lint from 1.35.2 to 1.36.0 in /tools (#​565)
feebb9b Bump github.com/aws/aws-sdk-go from 1.36.29 to 1.37.1 in /detectors/aws (#​566)
a7d455d (upstream/master) Update workflows to include main branch as trigger (#​564)
90490ec (origin/master, origin/HEAD) Bump github.com/aws/aws-sdk-go from 1.36.23 to 1.36.29 in /detectors/aws (#​558)
33f383b Bump cloud.google.com/go from 0.74.0 to 0.75.0 in /detectors/gcp (#​531)
6e9f6d3 Bump google.golang.org/grpc from 1.34.0 to 1.35.0 in /instrumentation/google.golang.org/grpc/otelgrpc (#​543)
a101606 Bump github.com/gogo/protobuf from 1.3.1 to 1.3.2 in /exporters/metric/cortex (#​530)
3d7fac5 Upgrade github.com/stretchr/testify from v1.6.1 to v1.7.0 (#​557)
40b35ec Bump github.com/golangci/golangci-lint from 1.35.0 to 1.35.2 in /tools (#​526)
37f53a3 Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 in /instrumentation/runtime (#​525)
a77bcb3 Bump github.com/stretchr/testify in /exporters/metric/dogstatsd (#​524)
77a5929 Bump google.golang.org/grpc (#​545)
bc4e070 Add code-coverage configuration to allow 1% delta (#​555)

v0.16.0

Compare Source

[0.16.0] - 2021-01-14

Fixed

• Fix module path for AWS ECS resource detector (#​517)

Raw changes made between v0.15.1 and v0.16.0

65367f2 Prepare v0.16.0 release (#​523)
cd07cf3 Fix module path for AWS ECS resource detector (#​517)
c07a08f Bump github.com/golangci/golangci-lint from 1.34.1 to 1.35.0 in /tools (#​519)
7717b1d Bump github.com/aws/aws-sdk-go from 1.36.19 to 1.36.23 in /detectors/aws (#​520)
c047d14 Update CI badge for README (#​516)
cede46c Merge code coverage output into single file for codecov.io (#​514)
26c2b18 Remove CircleCI config (#​513)
0ca2a70 Adding Security Workflows to GitHub Actions (2/2): gosec workflow (#​507)
f6da9db Adding Security Workflows to GitHub Actions (1/2): codeql workflow (#​506)
ccf6b73 Bump github.com/aws/aws-sdk-go from 1.36.15 to 1.36.19 in /detectors/aws (#​511)
3e8de75 Bump github.com/golangci/golangci-lint from 1.33.0 to 1.34.1 in /tools (#​510)
faf24ad Add @​dashpole as a project Approver (#​498)
c1aee10 Add instrumentation request issue templates (#​500)
c9c0a40 Bump github.com/aws/aws-sdk-go from 1.36.12 to 1.36.15 in /detectors/aws (#​503)
683e08e Bump github.com/aws/aws-sdk-go from 1.36.7 to 1.36.12 in /detectors/aws (#​499)
ec22a4d adding fetch depth (#​497)
31b2ca6 Migrate CircleCI ci.yml workflow to GitHub Actions (#​476)

v0.15.1

Compare Source

[0.15.1] - 2020-12-14

Added

• Add registry link check to Makefile and pre-release script. (#​446)
• A new AWS X-Ray ID Generator (#​459)

Fixed

• Fixes the body replacement in otelhttp to not to mutate a nil body. (#​484)

Raw changes made between v0.15.0 and v0.15.1

e484e9e Prepare for releasing v0.15.1 (#​496)
22c3914 Bundle Dependabot Updates (#​495)
3321403 Bump github.com/aws/aws-sdk-go from 1.36.2 to 1.36.7 in /detectors/aws (#​488)
f899260 Add AWS X-Ray ID Generator (#​459)
f96a4bd Add registry link check target to Makefile (#​446)
c1c564f tests(otelhttp): fixes the body replacement in otelhttp to not to mutate a nil body. (#​484)

v0.15.0

Compare Source

[0.15.0] - 2020-12-11

Added

• A new Amazon EKS resource detector. (#​465)
• A new gcp.CloudRun detector for detecting resource from a Cloud Run instance. (#​455)

Raw changes made between v0.14.0 and v0.15.0

e7b70eb Prepare for v0.15.0 release (#​486)
54c6a6c Add detector for Cloud Run service. (#​455)
79af2e9 Bump google.golang.org/grpc from 1.33.2 to 1.34.0 in /instrumentation/google.golang.org/grpc/otelgrpc (#​481)
fd9db4a Bump cloud.google.com/go from 0.72.0 to 0.73.0 in /detectors/gcp (#​483)
8f0fa29 Bump google.golang.org/grpc from 1.33.2 to 1.34.0 in /instrumentation/google.golang.org/grpc/otelgrpc/example (#​482)
401ff52 Bump google.golang.org/grpc from 1.33.2 to 1.34.0 in /propagators/opencensus/examples (#​480)
da8faf5 Bump github.com/aws/aws-sdk-go from 1.35.35 to 1.36.2 in /detectors/aws (#​479)
b02fae7 Add Amazon EKS Resource Detector (#​465)
d1534b8 add opencensus propagation readme and example (#​473)
e1c598c Add AWS X-Ray Propagator (#​462)
f9f5a21 move opencensus binary propagation to contrib (#​467)
82eb6a3 Bump github.com/google/go-cmp from 0.5.3 to 0.5.4 in /instrumentation/net/http/httptrace/otelhttptrace (#​472)
7ffe595 Bump github.com/google/go-cmp from 0.5.3 to 0.5.4 in /propagators (#​471)
be1c230 Bump github.com/google/go-cmp from 0.5.3 to 0.5.4 in /exporters/metric/cortex (#​470)
59c92e2 Bump github.com/aws/aws-sdk-go from 1.35.33 to 1.35.35 in /detectors/aws (#​469)
9e9f21b Bump github.com/golangci/golangci-lint from 1.32.2 to 1.33.0 in /tools (#​468)
645d23a Add Amazon ECS Resource Detector (#​466)
d648427 Bump github.com/aws/aws-sdk-go from 1.35.28 to 1.35.33 in /detectors/aws (#​463)
3be1f0d Bump github.com/Shopify/sarama from 1.27.0 to 1.27.2 in /instrumentation/github.com/Shopify/sarama/otelsarama (#​464)

v0.14.0

Compare Source

Added

• otelhttp.{Get,Head,Post,PostForm} convenience wrappers for their http counterparts. (#​390)
• The AWS detector now adds the cloud zone, host image ID, host type, and host name to the returned Resource. (#​410)

Changed

• Add semantic version to Tracer / Meter created by instrumentation packages otelsaram, otelrestful, otelmongo, otelhttp and otelhttptrace. (#​412)
• Update instrumentation guidelines about tracer / meter semantic version. (#​412)
• Replace internal tracer and meter helpers by helpers from go.opentelemetry.io/otel. (#​414)
• gRPC instrumentation sets span attribute rpc.grpc.status_code. (#​453)

Fixed

• /detectors/aws no longer fails if instance metadata is not available (e.g. not running in AWS) (#​401)
• The AWS detector now returns a partial resource and an appropriate error if it encounters an error part way through determining a Resource identity. (#​410)
• The host instrumentation unit test has been updated to not depend on the system it runs on. (#​426)

Raw changes made between v0.13.0 and v0.14.0

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: downloading golang.org/x/crypto v0.13.0
go: downloading go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin v0.44.0
go: downloading go.opentelemetry.io/otel v1.18.0
go: downloading golang.org/x/net v0.15.0
go: downloading golang.org/x/sys v0.12.0
go: downloading go.opentelemetry.io/otel/trace v1.18.0
go: downloading google.golang.org/protobuf v1.31.0
go: downloading github.com/go-logr/logr v1.2.4
go: downloading go.opentelemetry.io/otel/metric v1.18.0
go: downloading golang.org/x/text v0.13.0
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io v0.1.0
go: downloading go.opentelemetry.io/otel v1.38.0
go: github.com/uptrace/go-realworld-example-app/rwe imports
	go.opentelemetry.io/otel/api/global: cannot find module providing package go.opentelemetry.io/otel/api/global
go: github.com/uptrace/go-realworld-example-app/rwe imports
	go.opentelemetry.io/otel/label: cannot find module providing package go.opentelemetry.io/otel/label
go: github.com/uptrace/go-realworld-example-app/blog imports
	github.com/go-pg/pg/v10 imports
	go.opentelemetry.io/otel/api/trace: cannot find module providing package go.opentelemetry.io/otel/api/trace
go: github.com/uptrace/go-realworld-example-app/rwe imports
	github.com/go-redis/redis/v8 imports
	github.com/go-redis/redis/v8/internal imports
	go.opentelemetry.io/otel/api/metric: cannot find module providing package go.opentelemetry.io/otel/api/metric
go: github.com/uptrace/go-realworld-example-app/rwe imports
	github.com/uptrace/uptrace-go/uptrace imports
	go.opentelemetry.io/otel/sdk/trace imports
	go.opentelemetry.io/otel/internal/trace/parent: cannot find module providing package go.opentelemetry.io/otel/internal/trace/parent
go: github.com/uptrace/go-realworld-example-app/rwe imports
	github.com/uptrace/uptrace-go/uptrace imports
	github.com/uptrace/uptrace-go/spanexp imports
	go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace imports
	go.opentelemetry.io/otel/semconv: cannot find module providing package go.opentelemetry.io/otel/semconv
go: github.com/uptrace/go-realworld-example-app/rwe imports
	github.com/uptrace/uptrace-go/uptrace imports
	go.opentelemetry.io/otel/exporters/stdout imports
	go.opentelemetry.io/otel/sdk/metric/controller/push imports
	go.opentelemetry.io/otel/api/metric/registry: cannot find module providing package go.opentelemetry.io/otel/api/metric/registry
go: github.com/uptrace/go-realworld-example-app/rwe imports
	github.com/uptrace/uptrace-go/uptrace imports
	go.opentelemetry.io/otel/exporters/stdout imports
	go.opentelemetry.io/otel/sdk/metric/controller/push imports
	go.opentelemetry.io/otel/sdk/metric imports
	go.opentelemetry.io/otel/api/metric/metrictest: cannot find module providing package go.opentelemetry.io/otel/api/metric/metrictest