Releases: aws-observability/aws-otel-java-instrumentation
Release v1.29.0
Contains updates of the following upstream components:
OpenTelemetry Java - 1.29.0
OpenTelemetry Instrumentation for Java - 1.29.0
OpenTelemetry Java Contrib - 1.28.0
This release also publishes the ADOT Java auto-instrumentation Docker image v1.29.0 into our public ECR repository:
public.ecr.aws/aws-observability/adot-autoinstrumentation-java:v1.29.0
Release v1.28.1
Notice
We are aware CVE-2023-3635 relating to the com.squareup.okio:okio-bom package. The affected package was used by the AWS Distribution for OpenTelemetry (ADOT) Java Agent up to and including v1.28.0. We have prepared the new patch release of the ADOT Java Agent, v1.28.1 updating packages affected by this vulnerability. There are no functional changes from the previous patch version. We recommend that customers update their ADOT Java Agent to at least v1.28.1 at the earliest opportunity.
Release v1.28.0
This release updates the repackaged OpenTelemetry Java Agent to 1.28.0.
Contains updates of the following upstream components:
OpenTelemetry Java - 1.28.0
OpenTelemetry Instrumentation for Java - 1.28.0
OpenTelemetry Java Contrib - 1.27.0
This release also publishes the ADOT Java auto-instrumentation Docker image v1.28.0 into our public ECR repository:
public.ecr.aws/aws-observability/adot-autoinstrumentation-java:v1.28.0
Release v1.27.0
0f22bf0
PaurushGarg
Paurush Garg
This release updates the repackaged OpenTelemetry Java Agent to 1.27.0.
Contains updates of the following upstream components:
OpenTelemetry Java - 1.27.0
OpenTelemetry Instrumentation for Java - 1.27.0
OpenTelemetry Java Contrib - 1.27.0
This release also publishes the ADOT Java auto-instrumentation Docker image v1.27.0 into our public ECR repository:
public.ecr.aws/aws-observability/adot-autoinstrumentation-java:v1.27.0
Release v1.26.0
This release updates the repackaged OpenTelemetry Java Agent to 1.26.0.
Contains updates of the following upstream components:
- OpenTelemetry Java - 1.25.0 and 1.26.0
- OpenTelemetry Instrumentation for Java - 1.25.0, 1.25.1 and 1.26.0
- OpenTelemetry Java Contrib - 1.25.0, 1.25.1 and 1.26.0
This release also publishes the ADOT Java auto-instrumentation Docker image v1.26.0 into our public ECR repository:
- public.ecr.aws/aws-observability/adot-autoinstrumentation-java:v1.26.0
Release v1.24.0
This release updates the repackaged OpenTelemetry Java Agent to 1.24.0.
Check out the release notes for upstream versions
- https://github.com/open-telemetry/opentelemetry-java/releases/tag/v1.24.0
- https://github.com/open-telemetry/opentelemetry-java-contrib/releases/tag/v1.24.0
- https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/tag/v1.24.0
This release also publishes the ADOT Java auto-instrumentation Docker image v1.24.0:
- public.ecr.aws/aws-observability/adot-autoinstrumentation-java:v1.24.0
Release v1.23.0
This release updates the repackaged OpenTelemetry Java Agent to 1.23.0.
Check out the release notes for upstream versions
- https://github.com/open-telemetry/opentelemetry-java/releases/tag/v1.23.0
- https://github.com/open-telemetry/opentelemetry-java/releases/tag/v1.23.1
- https://github.com/open-telemetry/opentelemetry-java-contrib/releases/tag/v1.23.0
- https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/tag/v1.23.0
Release v1.21.1
This release updates the repackaged OpenTelemetry Java Agent to 1.21.1.
Check out the release notes for upstream versions
- https://github.com/open-telemetry/opentelemetry-java/releases/tag/v1.21.0
- https://github.com/open-telemetry/opentelemetry-java-contrib/releases/tag/v1.21.0
- https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/tag/v1.21.0
Other changes:
- Patch upstream dependencies to remove dependency on snakeyaml (#322)
Notice
We are aware of a potential issue in the upstream opentelemetry-java and opentelemetry-java-instrumentation with regards to the usage of the snakeyaml library (CVE-2022-1471), used by the AWS Distribution for Open Telemetry (ADOT) OpenTelemetry Java Agent up to and including v1.21.0.
We have prepared a new release, v1.21.1, of the ADOT Java Agent using a patched version of the upstream dependencies, removing the usage of the yamlsnake library (#322). There are no functional changes from the previous version. We recommend that customers update their ADOT Java Agent to at least v1.21.1 at the earliest opportunity. See the instructions for information on deploying the latest version.
Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1471
Release v1.21.0
This release updates the repackaged OpenTelemetry Java Agent to 1.21.0.
Check out the release notes for upstream versions
Release v1.20.0
This release updates the repackaged OpenTelemetry Java Agent to 1.20.0.
Check out the release notes for upstream versions
- https://github.com/open-telemetry/opentelemetry-java/releases/tag/v1.20.0
- https://github.com/open-telemetry/opentelemetry-java/releases/tag/v1.20.1
- https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/tag/v1.20.0
- https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/tag/v1.20.1
- https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/tag/v1.20.2
- https://github.com/open-telemetry/opentelemetry-java-contrib/releases/tag/v1.20.0
- https://github.com/open-telemetry/opentelemetry-java-contrib/releases/tag/v1.20.1