Weaver: vanhemmat versiot ja versiohistoria

## Release Notes

• Fix the JSON Schema of `SchemaUrl` to describe a string, matching how it is serialized. ([#1825](https://github.com/open-telemetry/weaver/pull/1825) by @lmolkova)
• Add `[[policy.finding_filters]]` to `.weaver.toml` to suppress policy findings. ([#1820](https://github.com/open-telemetry/weaver/pull/1820) by @lmolkova)
• Live-check no longer reports false `invalid_format` and `extends_namespace` advice for v2 attributes and templates referenced from a dependency. The advice now finds attributes the same way as the other checks：in the matched signal and attribute groups, or also in the whole registry and its dependencies with `--search-all-attributes`. Fixes [#1814](https://github.com/open-telemetry/weaver/issues/1814) - ([#1819](https://github.com/open-telemetry/weaver/pull/1819) by @jerbly)
• Add vdir documentation and safety features. We no longer untar symlinks or allow
non-local files to be extracted. ([#1817](https://github.com/open-telemetry/weaver/pull/1817) by @jsuereth)
• Remove `requirement_level` from Entity identity; a warning is emitted if `requirement_level` is set. Fixes [#986](https://github.com/open-telemetry/weaver/issues/986) - ([#1813](https://github.com/open-telemetry/weaver/pull/1813) by @jsuereth)
• Fix `registry live-check --emit-otlp-logs` sending findings back to its own OTLP listener, which with the default ports made every finding a new sample to check. Live-check now stops at startup with an error when the logs endpoint is its own listener, and logs the endpoint it uses. ([#1782](https://github.com/open-telemetry/weaver/pull/1782) by @jerbly)
• Fix `OTEL_EXPORTER_OTLP_ENDPOINT` being ignored by `registry emit` and `registry live-check --emit-otlp-logs`. When no endpoint is set with `--endpoint` / `--otlp-logs-endpoint` or in `.weaver.toml`, the signal's `OTEL_EXPORTER_OTLP_<SIGNAL>_ENDPOINT`, then `OTEL_EXPORTER_OTLP_ENDPOINT`, now apply before the `http://localhost:4317` default. ([#1782](https://github.com/open-telemetry/weaver/pull/1782) by @jerbly)
• Add `unref` to v2 signal refinements to unreference inherited attributes. ([#1799](https://github.com/open-telemetry/weaver/pull/1799) by @lmolkova)
• Support user-provided JQ modules via `jq_modules` in `weaver.yaml` to share custom functions in templates. Fixes [#565](https://github.com/open-telemetry/weaver/issues/565) - ([#1768](https://github.com/open-telemetry/weaver/pull/1768) by @LJimmy007)

## Install weaver 0.28.0

### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.28.0/weaver-installer.sh | sh
```

### Install prebuilt binaries via powershell script

```sh
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.28.0/weaver-installer.ps1 | iex"
```

## Download weaver 0.28.0

| File | Platform | Checksum |
|--------|----------|----------|
| [weaver-aarch64-apple-darwin.tar.xz](https://github.com/open-telemetry/weaver/releases/download/v0.28.0/weaver-aarch64-apple-darwin.tar.xz) | Apple Silicon macOS | [checksum](https://github.com/open-telemetry/weaver/releases/download/v0.28.0/weaver-aarch64-apple-darwin.tar.xz.sha256) |
| [weaver-x86_64-apple-darwin.tar.xz](https://github.com/open-telemetry/weaver/releases/download/v0.28.0/weaver-x86_64-apple-darwin.tar.xz) | Intel macOS | [checksum](https://github.com/open-telemetry/weaver/releases/download/v0.28.0/weaver-x86_64-apple-darwin.tar.xz.sha256) |
| [weaver-x86_64-pc-windows-msvc.zip](https://github.com/open-telemetry/weaver/releases/download/v0.28.0/weaver-x86_64-pc-windows-msvc.zip) | x64 Windows | [checksum](https://github.com/open-telemetry/weaver/releases/download/v0.28.0/weaver-x86_64-pc-windows-msvc.zip.sha256) |
| [weaver-x86_64-pc-windows-msvc.msi](https://github.com/open-telemetry/weaver/releases/download/v0.28.0/weaver-x86_64-pc-windows-msvc.msi) | x64 Windows | [checksum](https://github.com/open-telemetry/weaver

## Release Notes

• Support virtual-directory format for `--advice-policies` and `--advice-data` in live-check. ([#1760](https://github.com/open-telemetry/weaver/pull/1760) by @lmolkova)
• 💥 BREAKING CHANGE 💥 `registry live-check --output http`：`POST /stop` no longer returns the report. It stops the run and returns once the report is ready. Read the report with the new `GET /report`, then end the process with the new `POST /shutdown`. Reading the report is no longer tied to the process exiting, so large reports are never truncated. In this mode `--inactivity-timeout` is ignored: the client owns the run. Fixes [#1657](https://github.com/open-telemetry/weaver/issues/1657). ([#1770](https://github.com/open-telemetry/weaver/pull/1770) by @jerbly)
• Live-check reports now retain OTLP context on their samples, including span and log trace IDs, timestamps, span-event and link context, and metric data-point timing. OTLP finding logs are correlated with their source spans. ([#1749](https://github.com/open-telemetry/weaver/pull/1749) by @clarsen)
• Live-check matchers ([#1721](https://github.com/open-telemetry/weaver/pull/1721) by @jerbly)
• Added `[[live-check.matchers]]`. A matcher uses a CEL expression to select samples, and names the v2 signal and attribute groups they are checked against. v2 registries only.
• A matcher's `attribute_groups` lists the attribute groups allowed on a sample. Their definitions are used for the attribute checks, but an attribute missing from the sample is not reported. To enforce a group's requirement levels, name it in the new `strict_attribute_groups`. A signal's own attributes are always enforced.
• A `span_event` matcher cannot name a `signal`. A semantic convention event is a log-based event, and a span event has a different data model, so the two are not comparable. A span event's attributes are checked with `attribute_groups` or `strict_attribute_groups`, or with a Rego policy, and span events do not count toward event coverage. ([#1793](https://github.com/open-telemetry/weaver/pull/1793) by @jerbly)
• New findings：`kind_mismatch` and `unexpected_attribute`. A v2 metric or log raises `unexpected_attribute` against the signal its name resolves to, or against the matcher's signal when a matcher sets `signal`.
• By default, a v2 registry compares an attribute with the signal and attribute groups of its match. With `search_all_attributes`, it also searches the whole registry and its dependencies. v1 is unchanged.
• Every sample's result holds a `match_info` with the signal, the attribute groups, and what each applied matcher contributed.
• Statistics count the samples each matcher matched and errored on. A matcher that matched nothing is reported as a warning.
• Added `-D`/`--param` and `--params` to pass parameters to the output template. The ansi format reads `show_finding_id`, which labels a finding with its id instead of its level.
• Added [Matchers](crates/weaver_live_check/docs/matchers.md), a guide with a worked example for each sample type. Corrected the config section in the live-check and config READMEs from `[live_check]` to `[live-check]`. The underscore form was silently ignored.
• 💥 BREAKING CHANGE 💥 Fix live-check treating any key that starts with a template's name as an instance of it：`http.request.headers.host` no longer matches the template `http.request.header`, and now raises `missing_attribute`. A dot must follow the template name. The namespace separator is a fixed `.` throughout, so `registry mcp --namespace-separator` and its `[mcp] namespace_separator` config key are removed. Fixes [#1743](https://github.com/open-telemetry/weaver/issues/1743) - ([#1775](https://github.com/open-telemetry/weaver/pull/1775) by @jerbly)
• Config sections are checked when they are read. A command section in `.weaver.toml` that does not deserialize, or an unknown key under `[live-check]`, now stops the run instead of being ignored. ([#1721](https://github.com/open-telemetry/weaver/pull/1721) by 

## Release Notes

• Fix `weaver-installer.sh` failing to detect Unix platforms due to missing bash shell in release workflow. ([#1744](https://github.com/open-telemetry/weaver/issues/1744))

## Install weaver 0.26.1

### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-installer.sh | sh
```

### Install prebuilt binaries via powershell script

```sh
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-installer.ps1 | iex"
```

## Download weaver 0.26.1

| File | Platform | Checksum |
|--------|----------|----------|
| [weaver-aarch64-apple-darwin.tar.xz](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-aarch64-apple-darwin.tar.xz) | Apple Silicon macOS | [checksum](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-aarch64-apple-darwin.tar.xz.sha256) |
| [weaver-x86_64-apple-darwin.tar.xz](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-x86_64-apple-darwin.tar.xz) | Intel macOS | [checksum](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-x86_64-apple-darwin.tar.xz.sha256) |
| [weaver-x86_64-pc-windows-msvc.zip](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-x86_64-pc-windows-msvc.zip) | x64 Windows | [checksum](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-x86_64-pc-windows-msvc.zip.sha256) |
| [weaver-x86_64-pc-windows-msvc.msi](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-x86_64-pc-windows-msvc.msi) | x64 Windows | [checksum](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-x86_64-pc-windows-msvc.msi.sha256) |
| [weaver-aarch64-unknown-linux-gnu.tar.xz](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-aarch64-unknown-linux-gnu.tar.xz) | ARM64 Linux | [checksum](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-aarch64-unknown-linux-gnu.tar.xz.sha256) |
| [weaver-x86_64-unknown-linux-gnu.tar.xz](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-x86_64-unknown-linux-gnu.tar.xz) | x64 Linux | [checksum](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-x86_64-unknown-linux-gnu.tar.xz.sha256) |
| [weaver-aarch64-unknown-linux-musl.tar.xz](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-aarch64-unknown-linux-musl.tar.xz) | ARM64 MUSL Linux | [checksum](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-aarch64-unknown-linux-musl.tar.xz.sha256) |
| [weaver-x86_64-unknown-linux-musl.tar.xz](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-x86_64-unknown-linux-musl.tar.xz) | x64 MUSL Linux | [checksum](https://github.com/open-telemetry/weaver/releases/download/v0.26.1/weaver-x86_64-unknown-linux-musl.tar.xz.sha256) |

## Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the [GitHub CLI](https://cli.github.com/manual/gh_attestation_verify):
```sh
gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver
```

You can also download the attestation from [GitHub](https://github.com/open-telemetry/weaver/attestations) and verify against that directly:
```sh
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
```

## Release Notes

• 💥 BREAKING CHANGE 💥 `registry live-check` and `registry infer` now bind their OTLP and HTTP admin listeners to `127.0.0.1` instead of `0.0.0.0`, so they no longer listen on every local address by default. Pass `--otlp-grpc-address` (live-check) or `--grpc-address` (infer) to bind a specific interface, or `0.0.0.0` for all of them. The admin listener now binds to the same address as the OTLP listener rather than always to `0.0.0.0`. ([#1740](https://github.com/open-telemetry/weaver/pull/1740) by @lmolkova)
• Add selectable Rustls crypto providers (`crypto-ring`, `crypto-aws-lc`, `crypto-openssl`, `crypto-openssl-vendored`, `crypto-symcrypt`), with `crypto-ring` as the default. ([#1712](https://github.com/open-telemetry/weaver/pull/1712) by @lquerel)
• Add resolve configuration to allow overriding schema URLs for dependencies in `weaver.yaml` and `.weaver.toml`. ([#1693](https://github.com/open-telemetry/weaver/pull/1693) by @jsuereth)
• Add `entity_refs` and `lookup_entity` to the `semconv` Rego library, so an `after_resolution` policy can read the entity definition that an `entity_associations` leaf names, including one a dependency defines. `entity_refs` walks the `one_of` and `all_of` levels of an association. ([#1719](https://github.com/open-telemetry/weaver/pull/1719) by @jerbly)
• Add a `lookup_entity` Jinja function, which turns an `entity_associations` leaf into the entity definition it names, for `weaver registry generate` on a v2 registry. ([#1718](https://github.com/open-telemetry/weaver/pull/1718) by @jerbly)
• Live-check now follows a v2 `entity_associations` reference into a dependency, or to an entity refinement, neither of which the checker could see before：those entities went unchecked, so a resource missing their required attributes passed clean. A Rego advice policy can read the same v2 definitions, as `data.entities`. ([#1716](https://github.com/open-telemetry/weaver/pull/1716) by @jerbly)
• 💥 BREAKING CHANGE 💥 An `entity_associations` leaf in the materialized schema now says which registry defines the entity, as the published schema already did. A leaf that was the bare name `host` is now `{ type：host, provenance: { source: <schema url> } }`, and a leaf with no provenance means this registry defines it. A template, jq filter or Rego policy that read the leaf as a string reads `.type` instead, and the `serve` UI and its API are updated too. ([#1710](https://github.com/open-telemetry/weaver/pull/1710) by @jerbly)
• `dependencies` in the materialized (forge) schema is now a map keyed by schema url holding each registry once, and the `dependency_graph` gives the direct dependencies of each. ([#1730](https://github.com/open-telemetry/weaver/pull/1730) by @jerbly)
• Fix a legacy `type：resource` group converting to a v2 entity whose type carried the group-id prefix. The entity type now comes from the group's `name`, as it always did for imports, and falls back to the id when the group has none. Every `resource` group of semconv v1.33.0 has this shape, so `resource.host` became the entity `resource.host` rather than `host`, and an `entity_associations` entry naming `host` matched nothing. ([#1704](https://github.com/open-telemetry/weaver/pull/1704) by @jerbly)
• 💥 BREAKING CHANGE 💥 (v2 only) The resolution no longer strips a leading `entity.` or `span.` prefix from the type. I.e. an entity authored as `type：entity.test` now keeps the type `entity.test` instead of `test`. ([#1704](https://github.com/open-telemetry/weaver/pull/1704) by @jerbly)
• Report two groups whose ids differ but that take one id in the v2 output, as a warning. A v2 signal id drops the group-type prefix, so the groups `entity.host` and `host` both become the entity `host` and the second silently replaced the first. ([#1704](https://github.com/open-telemetry/weaver/pull/1704) by @jerbly)
• 💥 BREAKING CHANGE 💥 Resolve every `entity_associations` entry, and record which registry defines the entity it names. A name that n

Release Notes
• New feature (#1247, #1248) - .weaver.toml project configuration file for live-check. Covers all live-check CLI flags plus [[live_check.finding_filters]] for dropping findings by ID, minimum level, sample name, and signal type. CLI flags take precedence over config values. Use --config or auto-discovery from CWD. (#1256 by @jerbly)
• Fix attribute catalog sorting for attributes with the same key when converting from v1 to v2 catalog. (#1359 by @michaelvanstraten)
• Fix (#1323) - Live-check：treat observed int as compatible with expected double attribute type, avoiding false violations from OTLP serializers (e.g. JS) that emit int_value for integral numbers. (#1331 by @jerbly)
• Fix CLI so it doesn't error out early when loading a resolved schema. (#1304 by @jsuereth)
• 💥 BREAKING CHANGE 💥 Use schema_url to track registries consistently in lineage / provenance (#1298 by @jsuereth)
• Publish and document missing JSON schemas. Add head_schema_url/baseline_schema_url to diff v2. (#1106 by @lmolkova)
• Add --allow-git-credentials global flag to enable system credential helpers (e.g. osxkeychain, git-credential-manager) when cloning private registries. By default, git operations remain isolated for security. (#1306 by @jerbly)
• MCP：Add browse_namespace tool and findings_only output mode for live_check. Add configurable namespace separator via --namespace-separator. (#1324 by @jerbly)
• chore(deps)：update all patch versions. (#1379 by @renovate[bot])
• Remove vendored openssl dependency. (#1380 by @sapatrjv)
Install weaver 0.23.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-installer.ps1 | iex"
Download weaver 0.23.0
─────────────────────────────────────────────┬───────────────────┬─────────────
File │Platform │Checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-aarch64-apple-darwin.tar.xz │Apple Silicon macOS│checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-x86_64-apple-darwin.tar.xz │Intel macOS │checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-x86_64-pc-windows-msvc.zip │x64 Windows │checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-x86_64-pc-windows-msvc.msi │x64 Windows │checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-aarch64-unknown-linux-gnu.tar.xz │ARM64 Linux │checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-x86_64-unknown-linux-gnu.tar.xz │x64 Linux │checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-aarch64-unknown-linux-musl.tar.xz │ARM64 MUSL Linux │checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-x86_64-unknown-linux-musl.tar.xz │x64 MUSL Linux │checksum
─────────────────────────────────────────────┴───────────────────┴─────────────
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver
You can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Release Notes
- New feature (#1247, #1248) - .weaver.toml project configuration file for live-check. Covers all live-check CLI flags plus [[live_check.finding_filters]] for dropping findings by ID, minimum level, sample name, and signal type. CLI flags take precedence over config values. Use --config or auto-discovery from CWD. (#1256 by @jerbly)
- Fix attribute catalog sorting for attributes with the same key when converting from v1 to v2 catalog. (#1359 by @michaelvanstraten)
- Fix (#1323) - Live-check: treat observed int as compatible with expected double attribute type, avoiding false violations from OTLP serializers (e.g. JS) that emit int_value for integral numbers. (#1331 by @jerbly)
- Fix CLI so it doesn't error out early when loading a resolved schema. (#1304 by @jsuereth)
- 💥 BREAKING CHANGE 💥 Use schema_url to track registries consistently in lineage / provenance (#1298 by @jsuereth)
- Publish and document missing JSON schemas. Add head_schema_url/baseline_schema_url to diff v2. (#1106 by @lmolkova)
- Add --allow-git-credentials global flag to enable system credential helpers (e.g. osxkeychain, git-credential-manager) when cloning private registries. By default, git operations remain isolated for security. (#1306 by @jerbly)
- MCP: Add browse_namespace tool and findings_only output mode for live_check. Add configurable namespace separator via --namespace-separator. (#1324 by @jerbly)
- chore(deps): update all patch versions. (#1379 by @renovate[bot])
- Remove vendored openssl dependency. (#1380 by @sapatrjv)
Install weaver 0.23.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-installer.ps1 | iex"
Download weaver 0.23.0
─────────────────────────────────────────────┬───────────────────┬─────────────
File │Platform │Checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-aarch64-apple-darwin.tar.xz │Apple Silicon macOS│checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-x86_64-apple-darwin.tar.xz │Intel macOS │checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-x86_64-pc-windows-msvc.zip │x64 Windows │checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-x86_64-pc-windows-msvc.msi │x64 Windows │checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-aarch64-unknown-linux-gnu.tar.xz │ARM64 Linux │checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-x86_64-unknown-linux-gnu.tar.xz │x64 Linux │checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-aarch64-unknown-linux-musl.tar.xz │ARM64 MUSL Linux │checksum
─────────────────────────────────────────────┼───────────────────┼─────────────
weaver-x86_64-unknown-linux-musl.tar.xz │x64 MUSL Linux │checksum
─────────────────────────────────────────────┴───────────────────┴─────────────
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver
You can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Release Notes
Note: 0.22.0 release was skipped due to release CI/CD issues.
- Fix: Update release workflow for pnpm migration (use pnpm lockfile instead of npm lockfile). (#1289 by @jerbly)
- Add support for git references in the registry url (#182 by @sebasnabas)
- New feature (#1153) - Live-check now has a /health endpoint that can be used in long-running scenarios to confirm readiness and liveness of the live-check server. (#1193 by @jerbly)
- New feature (#1100) - Set --output=http to have live-check send its report as the response to /stop. (#1193 by @jerbly)
- Unified output handling across all registry subcommands. Builtin output formats (json, yaml, jsonl) are now available in registry stats, registry diff, and registry resolve. registry stats also supports --templates for custom text output templates. (#1200 by @jerbly)
- New feature (#1152) - Live-check with --emit-otlp-logs will now include the attributes from the resource in the emitted log record, this helps to identify the source of the finding in a multi-source environment. (#1206 by @jerbly)
- New Experimental feature: weaver registry infer command that listens for OTLP telemetry and infers a semantic convention registry file from the received data. Supports spans, metrics, events, and resource attributes. Includes configurable gRPC address/port, admin server for graceful shutdown, and inactivity timeout. (#1138 by @ArthurSens)
- Fix: Include unit in inferred schema even if empty to prevent live-check failures. (#1284 by @ArthurSens)
- Use schema_url in registry manifest, dependencies, and resolved schema instead of registry_url. Parse registry name and version
from it. (#1202 by @lmolkova)
- Default to manifest.yaml for registry manifest file, deprecate registry_manifest.yaml and add warning when it's used. (#1202 by @lmolkova)
- 💥 BREAKING CHANGE 💥 (Fixes #760) - Auto-escaping is now off by default (none) for all templates, regardless of file extension. To opt in, set auto_escape: html or auto_escape: json per template in weaver.yaml. Within a template, {% autoescape false %} blocks can selectively disable escaping for sections. Use |tojson for explicit JSON/YAML value escaping where needed. (#1239 by @jerbly)
- 💥 BREAKING CHANGE 💥 Replace version: "2" with file_format: definition/2 for v2 definition schema (#1154 by @lmolkova)
- Add JSON schema for resolved registry v2 (#1261 by @lmolkova)
- Add weaver registry package command to generate manifest and write resolved schema. (#1254 by @lmolkova)
- Fix: weaver registry package command not producing output due to warnings. (#1271 by @lmolkova)
- Update JSON Schema v2 to include file_format (#1262 by @lmolkova)
- Add JSON schema for PolicyFinding, make context field optional. (#1270 by @lmolkova)
- Deprecate weaver registry resolve command, please use weaver registry generate or package instead (#1255 by @lmolkova)
- Support imports for all signal types and public attribute groups in v2 registry. (#1267 by @jsuereth)
- Support refinements in v2 syntax: metric names, notes, etc. are now copied from the refined group. (#1250 by @jsuereth)
- Fix stability/ordering issues in v2 publishing; attributes are now sorted and deduplicated consistently. (#1282 by @jsuereth)
- Fix resolution for dependencies: both v1 and v2 resolution now returns the correct attribute from the right registry when using dependencies. (#1280 by @lmolkova)
- JQ helper v2 for spans: fixes and improvements. (#1251 by @lmolkova)
- Fix 404 on template-type attributes in the weaver serve API. (#1240 by @jerbly)
- New Experimental feature: weaver serve UI migrated to React. (#1147 by @nicolastakashi)
Install weaver 0.22.1
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.22.1