From e7edc916afebd58ae43fb44c57d41b6e9e81ae6a Mon Sep 17 00:00:00 2001 From: Andrew Lukoshko Date: Thu, 7 Aug 2025 07:53:48 +0000 Subject: [PATCH] import CS opentelemetry-collector-0.127.0-1.el9 --- .gitignore | 2 +- .opentelemetry-collector.metadata | 2 +- SPECS/opentelemetry-collector.spec | 38 ++++++++++++++++++++++++++++-- 3 files changed, 38 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 51d498c..d31105d 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/redhat-opentelemetry-collector-0.107.0.tar.gz +SOURCES/redhat-opentelemetry-collector-0.127.0.tar.gz diff --git a/.opentelemetry-collector.metadata b/.opentelemetry-collector.metadata index f345b69..d373e18 100644 --- a/.opentelemetry-collector.metadata +++ b/.opentelemetry-collector.metadata @@ -1 +1 @@ -38f5ad96f29b9cae1d3e44eebc12851399f0d270 SOURCES/redhat-opentelemetry-collector-0.107.0.tar.gz +d25346746db4cdcb82ff8268bbbc0e9c3eb29b88 SOURCES/redhat-opentelemetry-collector-0.127.0.tar.gz diff --git a/SPECS/opentelemetry-collector.spec b/SPECS/opentelemetry-collector.spec index 9bd2d6d..1dad1f6 100644 --- a/SPECS/opentelemetry-collector.spec +++ b/SPECS/opentelemetry-collector.spec @@ -1,6 +1,6 @@ %global goipath github.com/os-observability/redhat-opentelemetry-collector -Version: 0.107.0 +Version: 0.127.0 ExcludeArch: %{ix86} s390 ppc ppc64 %gometa @@ -12,7 +12,7 @@ Collector with the supported components for a Red Hat build of OpenTelemetry} %global godocs README.md Name: opentelemetry-collector -Release: 4%{?dist} +Release: 1%{?dist} Summary: Red Hat build of OpenTelemetry License: Apache-2.0 @@ -106,6 +106,40 @@ fi %{_bindir}/* %changelog +* Tue Jun 10 2025 Kseniia Nivnia - 0.127.0-1 +- Collector version update +- Go version update to v1.23.9 +- Update addresses CVE-2025-22871 + Resolves: RHEL-90050 + +* Wed Mar 26 2025 Conor Cowman - 0.107.0-8 +- Bump revision +- Update golang-jwt v5.2.1 to v5.2.2 +- Update addresses CVE-2025-30204 + Resolves: RHEL-85033 + +* Fri Mar 21 2025 Conor Cowman - 0.107.0-7 +- Bump revision +- Update go-jose v4.0.2 to v4.0.5 +- Update testify v1.9.0 to v1.10.0 +- Update addresses CVE-2025-27144 + Resolves: RHEL-82967 + +* Fri Mar 21 2025 Conor Cowman - 0.107.0-6 +- Bump revision +- Update expr v1.16.9 to v1.17.0 +- Remove explicit go toolchain dependency +- Update addresses CVE-2025-29786 + Resolves: RHEL-83841 + +* Fri Mar 14 2025 Conor Cowman - 0.107.0-5 +- Bump revision +- Update Golang v1.22.11 to v1.23.0 +- Add toolchain go1.23.7 +- Update x/oauth2 v0.22.0 to v0.27.0 +- Update addresses CVE-2025-22868 + Resolves: RHEL-81359 + * Thu Mar 06 2025 Conor Cowman - 0.107.0-4 - Bump revision - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation