Update dependency open-telemetry/weaver to v0.24.1

[renovate]

This PR contains the following updates:

Package	Update	Change
open-telemetry/weaver	minor	v0.23.0 → v0.24.1

---

Release Notes

open-telemetry/weaver (open-telemetry/weaver)

v0.24.1: 0.24.1 - 2026-06-21

Compare Source

Release Notes

• Fix stack overflow when generating OpenAPI spec (#​1521 by @​jerbly)

Install weaver 0.24.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.24.1/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.24.1/weaver-installer.ps1 | iex"

Download weaver 0.24.1

File	Platform	Checksum
weaver-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
weaver-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
weaver-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
weaver-x86_64-pc-windows-msvc.msi	x64 Windows	checksum
weaver-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
weaver-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
weaver-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
weaver-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.24.0: 0.24.0 - 2026-06-19

Compare Source

Release Notes

• Add requirement_level (recommended/opt_in) for all v2 signals (metrics, spans, events, entities). (#​1515 by @​lmolkova)

• Add dependency_resolution.exclude annotation to hide attributes, groups, and signals from registries that depend on this one. (#​1458 by @​lmolkova)

• Add one_of and all_of combinators to entity_associations, letting a signal (span, metric, or event) require any-of or all-of a set of entities, nested arbitrarily. A bare list of entity references remains supported and is treated as an implicit one_of. See semconv-syntax.v2.md. (#​1493 by @​jerbly)

• Add weaver-live-check-start and weaver-live-check-stop composite GitHub Actions for CI integration. (#​1448)

• Rename resolved_schema_uri to resolved_registry_uri in publication manifest and in package command. (#​1425)

• Fix V2 resolver overwriting SpanName.note with the span type id during resolution. (#​1401)

• Add semconv_grouped_events JQ helper with v1/v2 options parity and coverage. (#​1439)

• New feature (#​1344) - Support authenticated HTTP downloads of remote registries, including GitHub private release assets. Auth is configured per-URL via [[auth]] entries in .weaver.toml (longest url_prefix wins), with tokens sourced from a literal token, a token_env variable, or a token_command helper (e.g. ["gh", "auth", "token"]). (#​1356 by @​jerbly)

• New feature - .weaver.toml project configuration now covers all subcommands allowing for simplified configuration management. See the README.md (#​1410 by @​jerbly)

• Fix (#​1297) - Live-check: entity validation now supported. (#​1426 by @​jerbly)

• Live-check OTLP log findings are now dog-fooded: the event schema, attributes, and enumerations are defined in a semconv model and code-generated using Weaver's own templates. See finding.md for the generated reference documentation and dog-fooding.md for the full dog-fooding guide.

  💥 BREAKING CHANGES 💥 to the log schema:

  • attribute_name → attribute_key (in weaver.finding.context)
  • weaver.finding.sample_type → weaver.finding.sample.type
  • weaver.finding.signal_type → weaver.finding.signal.type
  • weaver.finding.signal_name → weaver.finding.signal.name
  • weaver.finding.resource_attribute.<key> → weaver.finding.resource.attribute.<key>

  (#​1232 by @​jerbly)

Install weaver 0.24.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.24.0/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.24.0/weaver-installer.ps1 | iex"

Download weaver 0.24.0

File	Platform	Checksum
weaver-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
weaver-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
weaver-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
weaver-x86_64-pc-windows-msvc.msi	x64 Windows	checksum
weaver-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
weaver-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
weaver-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
weaver-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 8am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.