chore(deps): update otel/weaver docker tag to v0.24.2

[renovate-rancher]

This PR contains the following updates:

Package	Type	Update	Change
otel/weaver	stage	minor	v0.22.1 → v0.24.2

---

Release Notes

open-telemetry/weaver (otel/weaver)

v0.24.2: 0.24.2 - 2026-06-23

Compare Source

Release Notes

• Fix boolean flags (--v2, --skip-policies, etc.) consuming the following positional argument; bare flags work again and --flag=false overrides .weaver.toml. (#​1532 by @​jerbly)

Install weaver 0.24.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.24.2/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.24.2/weaver-installer.ps1 | iex"

Download weaver 0.24.2

File	Platform	Checksum
weaver-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
weaver-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
weaver-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
weaver-x86_64-pc-windows-msvc.msi	x64 Windows	checksum
weaver-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
weaver-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
weaver-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
weaver-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.24.1: 0.24.1 - 2026-06-21

Compare Source

Release Notes

• Fix stack overflow when generating OpenAPI spec (#​1521 by @​jerbly)

Install weaver 0.24.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.24.1/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.24.1/weaver-installer.ps1 | iex"

Download weaver 0.24.1

File	Platform	Checksum
weaver-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
weaver-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
weaver-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
weaver-x86_64-pc-windows-msvc.msi	x64 Windows	checksum
weaver-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
weaver-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
weaver-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
weaver-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.24.0: 0.24.0 - 2026-06-19

Compare Source

Release Notes

• Add requirement_level (recommended/opt_in) for all v2 signals (metrics, spans, events, entities). (#​1515 by @​lmolkova)

• Add dependency_resolution.exclude annotation to hide attributes, groups, and signals from registries that depend on this one. (#​1458 by @​lmolkova)

• Add one_of and all_of combinators to entity_associations, letting a signal (span, metric, or event) require any-of or all-of a set of entities, nested arbitrarily. A bare list of entity references remains supported and is treated as an implicit one_of. See semconv-syntax.v2.md. (#​1493 by @​jerbly)

• Add weaver-live-check-start and weaver-live-check-stop composite GitHub Actions for CI integration. (#​1448)

• Rename resolved_schema_uri to resolved_registry_uri in publication manifest and in package command. (#​1425)

• Fix V2 resolver overwriting SpanName.note with the span type id during resolution. (#​1401)

• Add semconv_grouped_events JQ helper with v1/v2 options parity and coverage. (#​1439)

• New feature (#​1344) - Support authenticated HTTP downloads of remote registries, including GitHub private release assets. Auth is configured per-URL via [[auth]] entries in .weaver.toml (longest url_prefix wins), with tokens sourced from a literal token, a token_env variable, or a token_command helper (e.g. ["gh", "auth", "token"]). (#​1356 by @​jerbly)

• New feature - .weaver.toml project configuration now covers all subcommands allowing for simplified configuration management. See the README.md (#​1410 by @​jerbly)

• Fix (#​1297) - Live-check: entity validation now supported. (#​1426 by @​jerbly)

• Live-check OTLP log findings are now dog-fooded: the event schema, attributes, and enumerations are defined in a semconv model and code-generated using Weaver's own templates. See finding.md for the generated reference documentation and dog-fooding.md for the full dog-fooding guide.

  💥 BREAKING CHANGES 💥 to the log schema:

  • attribute_name → attribute_key (in weaver.finding.context)
  • weaver.finding.sample_type → weaver.finding.sample.type
  • weaver.finding.signal_type → weaver.finding.signal.type
  • weaver.finding.signal_name → weaver.finding.signal.name
  • weaver.finding.resource_attribute.<key> → weaver.finding.resource.attribute.<key>

  (#​1232 by @​jerbly)

Install weaver 0.24.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.24.0/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.24.0/weaver-installer.ps1 | iex"

Download weaver 0.24.0

File	Platform	Checksum
weaver-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
weaver-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
weaver-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
weaver-x86_64-pc-windows-msvc.msi	x64 Windows	checksum
weaver-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
weaver-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
weaver-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
weaver-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.23.0: 0.23.0 - 2026-04-22

Compare Source

Release Notes

• New feature (#​1247, #​1248) - .weaver.toml project configuration file for live-check. Covers all live-check CLI flags plus [[live_check.finding_filters]] for dropping findings by ID, minimum level, sample name, and signal type. CLI flags take precedence over config values. Use --config or auto-discovery from CWD. (#​1256 by @​jerbly)
• Fix attribute catalog sorting for attributes with the same key when converting from v1 to v2 catalog. (#​1359 by @​michaelvanstraten)
• Fix (#​1323) - Live-check: treat observed int as compatible with expected double attribute type, avoiding false violations from OTLP serializers (e.g. JS) that emit int_value for integral numbers. (#​1331 by @​jerbly)
• Fix CLI so it doesn't error out early when loading a resolved schema. (#​1304 by @​jsuereth)
• 💥 BREAKING CHANGE 💥 Use schema_url to track registries consistently in lineage / provenance (#​1298 by @​jsuereth)
• Publish and document missing JSON schemas. Add head_schema_url/baseline_schema_url to diff v2. (#​1106 by @​lmolkova)
• Add --allow-git-credentials global flag to enable system credential helpers (e.g. osxkeychain, git-credential-manager) when cloning private registries. By default, git operations remain isolated for security. (#​1306 by @​jerbly)
• MCP: Add browse_namespace tool and findings_only output mode for live_check. Add configurable namespace separator via --namespace-separator. (#​1324 by @​jerbly)
• chore(deps): update all patch versions. (#​1379 by @​renovate[bot])
• Remove vendored openssl dependency. (#​1380 by @​sapatrjv)

Install weaver 0.23.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-installer.ps1 | iex"

Download weaver 0.23.0

File	Platform	Checksum
weaver-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
weaver-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
weaver-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
weaver-x86_64-pc-windows-msvc.msi	x64 Windows	checksum
weaver-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
weaver-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
weaver-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
weaver-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.