Commit Graph

8198 Commits

Author SHA1 Message Date
Trask Stalnaker b25283d2ca
Fix release contributors script (#6879)
Similar to
https://github.com/open-telemetry/opentelemetry-java-contrib/pull/530.

Also, I fixed the contributor list in the release notes which was
incorrect due to this bug (I believe only in this latest release due to
introduction of dependabot).
2022-10-14 08:54:45 -07:00
Trask Stalnaker 461420110a
Small release doc update (#6878) 2022-10-14 08:54:01 -07:00
Trask Stalnaker 3601a84b3d
Update repo settings doc (#6877)
Added new "Restrict pushes that create matching branches: UNCHECKED",
which I discovered is needed during contrib release.

Removed the old `v*` branch protections since we don't need to make any
more patch releases from those old branch names anymore.
2022-10-14 08:53:42 -07:00
Trask Stalnaker c1cdadab5d
Fix testLatestDeps (#6880) 2022-10-14 12:03:48 +03:00
dependabot[bot] 2c423b44b2
Bump jackson-bom from 2.13.4.20221012 to 2.13.4.20221013 in /dependencyManagement (#6873) 2022-10-13 21:02:19 -07:00
Trask Stalnaker 9621ea08cf
Update repo settings (#6862)
it seems that github recently tightened up the branch protection
restrictions (in a way that makes more sense than the prior behavior)
2022-10-13 20:07:36 -07:00
Trask Stalnaker 63302ccd3e
Split out license check as separate github action (#6863)
I've been having a bit of trouble with the license check in our distro
repo, and I think it's helpful for it to be a separate github action
(also for visibility).
2022-10-13 19:09:22 -07:00
Trask Stalnaker b1bc39db59
Fix website PR (#6869)
Need to manually run the action after merging.
2022-10-13 07:32:30 -07:00
Trask Stalnaker 7104290294
Fix markdown link check (#6868)
https://kotlinlang.org/docs/coroutines-overview.html appears to be
bot-aware, I can go to it in my browser, but can't curl it
2022-10-13 12:21:17 +03:00
dependabot[bot] 0a88ade490
Bump jackson-bom from 2.13.4 to 2.13.4.20221012 in /dependencyManagement (#6865) 2022-10-12 18:21:53 -07:00
dependabot[bot] a8b0c33fcb
Bump com.gradle.enterprise from 3.11.1 to 3.11.2 (#6864) 2022-10-12 18:19:44 -07:00
OpenTelemetry Bot 8b216a10ac
Copy change log updates from release/v1.19.x (#6867)
Copy log updates from `release/v1.19.x`.
2022-10-12 17:46:48 -07:00
OpenTelemetry Bot e30054eb32
Update version to 1.20.0-SNAPSHOT (#6861)
Update version to `1.20.0-SNAPSHOT`.
2022-10-12 22:01:43 +00:00
Trask Stalnaker c40d3235c0
Update change log for 1.19.0 release (#6859) 2022-10-12 13:11:09 -07:00
Lauri Tulmin 279ab34ba9
Fix regression in webflux http client concurrency test (#6858)
Resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/6857
Resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/6856
Resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/6854
Looks like a regression from
https://github.com/open-telemetry/opentelemetry-java-instrumentation/pull/6836
2022-10-12 09:21:49 -07:00
jack-berg aeac361816
Upgrade to otel java 1.19.0 (#6757)
Working PR to capture all the changes required to update to otel java
1.19.0. The new log API force allows
`:instrumentation-appender-api-internal` and
`:instrumentation-appender-sdk-internal`, but necessitates a decent
amount of refactoring as a result.

The PR points at the `1.19.0-SNAPSHOT`, which I'll update upon
publication.

Co-authored-by: Mateusz Rzeszutek <mrzeszutek@splunk.com>
Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
Co-authored-by: Lauri Tulmin <ltulmin@splunk.com>
2022-10-12 09:19:37 -07:00
Trask Stalnaker c5cd8d67a3
Fix create website pull request (#6852) 2022-10-11 18:07:56 -07:00
dependabot[bot] d58965457c
Bump gradle-nullaway-plugin from 1.3.0 to 1.4.0 in /conventions (#6839) 2022-10-11 21:34:22 +00:00
dependabot[bot] 3806e4f295
Bump error_prone_annotations from 2.15.0 to 2.16 in /dependencyManagement (#6847) 2022-10-11 14:20:34 -07:00
dependabot[bot] 59940699c7
Bump error_prone_test_helpers from 2.15.0 to 2.16 in /dependencyManagement (#6840) 2022-10-11 20:56:08 +00:00
jack-berg fcd5876e1a
Add HTTP client and server tests (#6836)
Resolves #6835.
2022-10-11 20:12:48 +00:00
dependabot[bot] 56fa7eedee
Bump gradle-errorprone-plugin from 2.0.2 to 3.0.1 in /conventions (#6841) 2022-10-11 12:55:30 -07:00
dependabot[bot] 6c23d98387
Bump error_prone_core from 2.15.0 to 2.16 in /dependencyManagement (#6849) 2022-10-11 12:52:42 -07:00
Trask Stalnaker 45f95efc81
Update byte buddy from 1.12.17 to 1.12.18 (#6851)
I will rebase the dependabot PRs after this is merged, so that
dependabot won't mark these versions internally as ignored
2022-10-11 12:41:13 -07:00
jack-berg d5aadbab04
Split out :instrumentation:netty:netty-4.1 library (#6820)
Resolves #6734. Builds on #6811.
2022-10-10 16:01:14 -07:00
Mateusz Rzeszutek 77035fc88c
Extract `net.peer.{name,port}` on start for CLIENT spans (#6828)
The [HTTP
spec](https://github.com/open-telemetry/opentelemetry-specification/blob/main/specification/trace/semantic_conventions/http.md#http-client)
says these two attributes must be provided at span creation time - I
think it makes sense to extend it over to all `net`-related
instrumentations, cause these are supposed to be the logical peer
name/port, which are supposed to be known before the connection is
started/exchange is made.
2022-10-10 16:00:19 -07:00
Lauri Tulmin 418c414de9
Remove vaadin latest deps restriction (#6829)
Resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/6551
2022-10-07 12:14:06 -07:00
Mateusz Rzeszutek 709ab76dd2
Add @theletterf as docs codeowner (#6830)
cc @theletterf
2022-10-07 12:08:34 -07:00
Malte 7117f4226d
ISSUE-2674 Strip sensitive data from the url (#6417)
Fixes #2674 by replacing basic auth information as part of the URL with
`username:password`.

Co-authored-by: Malte <MALPI@users.noreply.github.com>
Co-authored-by: Mateusz Rzeszutek <mrzeszutek@splunk.com>
Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2022-10-07 13:18:23 +02:00
Trask Stalnaker 5184a523b6
Add test for null httpcontext (#6823)
follow-up to #6792
2022-10-07 12:39:50 +03:00
Lauri Tulmin 5daf453e1d
Remove latest dep restriction from vertx-http-client-4.0 (#6827)
Should have been part of
https://github.com/open-telemetry/opentelemetry-java-instrumentation/pull/6809,
forgot to add this file.
2022-10-07 11:31:57 +02:00
dependabot[bot] d0782b54da
Bump auto-value-annotations from 1.9 to 1.10 in /dependencyManagement (#6822) 2022-10-06 23:34:40 +00:00
jason plumb d9b25d34df
Guard against null HttpContext (#6792)
Resolves #6787

Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2022-10-06 16:03:03 -07:00
Trask Stalnaker f4c5719c99
Allow auto-merge on PRs (#6812)
This seems nice for after pushing `spotlessApply` on an otherwise
approved and passing PR. I just enabled it and tried it on #6774.

(somewhat related to #6743)

Btw, I thought this was helpful explanation

> After you enable auto-merge for a pull request, if someone who does
not have write permissions to the repository pushes new changes to the
head branch or switches the base branch of the pull request, auto-merge
will be disabled. For example, if a maintainer enables auto-merge for a
pull request from a fork, auto-merge will be disabled after a
contributor pushes new changes to the pull request.


https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/incorporating-changes-from-a-pull-request/automatically-merging-a-pull-request#about-auto-merge
2022-10-06 16:02:27 -07:00
dependabot[bot] 7e6310255b
Bump auto-value from 1.9 to 1.10 in /dependencyManagement (#6821) 2022-10-06 16:00:00 -07:00
Trask Stalnaker 586261d25a
Run context customizers before span start instead of after (#6634)
...so that they can have access to the parent span context, and so that
their additions to the context will be visible to span processors
2022-10-06 12:11:17 -07:00
jack-berg 1fcea2017b
Publish :instrumentation:netty:netty-4-common as library instrumentation (#6811)
Related to #6734. Builds on #6805.

I'll follow it up by splitting out `:instrumentation:netty:netty-4.1` in
a separate PR.
2022-10-06 08:50:25 -07:00
Mateusz Rzeszutek 891ec8c491
Rename restlet-1.0 to restlet-1.1 (#6814) 2022-10-06 08:49:55 -07:00
Mateusz Rzeszutek ab0c875015
Link RabbitMQ receive span with the producer span (#6808)
Similar to #6804, but for RabbitMQ.
Also changed the span kind of the receive span to `CONSUMER`, to match
the spec.
2022-10-06 12:20:19 +03:00
Trask Stalnaker 6f6af66c04
Update to slf4j 2.0.2 (#6774)
~testLatestDeps is failing, see #6791~
2022-10-06 01:28:53 +00:00
Trask Stalnaker 06b6f0a2f2
Split out separate spotless CI check (#6743)
To make it clearer when the only problem with a PR is spotless (and may
follow-up with a comment-driven automation to apply spotless to a PR)
2022-10-05 17:17:01 -07:00
Mateusz Rzeszutek 0e84d10e58
Fix Restlet v2 `Message#getAttributes` calls (#6796)
Fixes #6563
2022-10-05 13:29:05 -07:00
Lauri Tulmin d9eff461d8
Fix instrumentation for vert.x 4.3.4 (#6809)
Resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/6790
2022-10-05 09:26:48 -07:00
jack-berg 4c91ec9f42
Publish :instrumentation:netty:netty-common as library instrumentation (#6805)
Related to #6734.

This first stage splits out the shared utilities in
`:instrumentation:netty:netty-common`. I'll follow it up by splitting
out `:instrumentation:netty:netty-4-common`,
`:instrumentation:netty:netty-4.1` in separate PRs. If there is
appetite, I can also split out library instrumentation for
`:instrumentation:netty:netty-4.0` and
`:instrumentation:netty:netty-3.8`, though I have no need for these.
2022-10-05 09:24:44 -07:00
Mateusz Rzeszutek f195ec0624
Link JMS receive span with the producer span (#6804)
Resolves #6779

In JMS you can have either the consumer receive span or the consumer
process span (unlike Kafka, where the process span is always there and
the receive span is just an addition) - in scenarios where polling
(receive) is used, I think it makes sense to add links to the producer
span to preserve the producer-consumer connection. Current messaging
semantic conventions don't really describe a situation like this one,
but the https://github.com/open-telemetry/oteps/pull/220 OTEP mentions
that links might be used in a scenario like this one - which makes me
think that adding links here might be a not that bad idea.
2022-10-05 09:11:28 -07:00
dependabot[bot] da3eecfd9f
Bump testcontainers-bom from 1.17.3 to 1.17.5 in /dependencyManagement (#6806) 2022-10-04 17:17:56 -07:00
dependabot[bot] 5f75a5060b
Bump asm-tree from 9.3 to 9.4 in /conventions (#6801)
Bumps asm-tree from 9.3 to 9.4.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.ow2.asm:asm-tree&package-manager=gradle&previous-version=9.3&new-version=9.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mateusz Rzeszutek <mrzeszutek@splunk.com>
2022-10-04 15:29:15 +02:00
dependabot[bot] d69a8b18c7
Bump asm from 9.3 to 9.4 in /conventions (#6802)
Bumps asm from 9.3 to 9.4.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.ow2.asm:asm&package-manager=gradle&previous-version=9.3&new-version=9.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-04 13:47:10 +02:00
Trask Stalnaker dc7e072a56
Fix testLatestDeps (#6791) 2022-09-30 15:43:07 -07:00
Trask Stalnaker 6416a141cb
Use spock bom (#6785) 2022-09-30 12:04:48 +03:00