Update Expr to v1.17.7

- Addresses CVE-2025-68156
- Resolves: RHEL-136443

.gitignore

@@ -1 +1,5 @@
-redhat-opentelemetry-collector-0.135.0.tar.gz
+/opentelemetry-collector-0.102.1.tar.gz
+/opentelemetry-collector-0.107.0.tar.gz
+/redhat-opentelemetry-collector-0.107.0.tar.gz
+/redhat-opentelemetry-collector-0.127.0.tar.gz
+/redhat-opentelemetry-collector-0.135.0.tar.gz

changelog

@@ -0,0 +1,99 @@
+* Tue Jun 10 2025 Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
+- Collector version update
+- Go version update to v1.23.9
+- Update addresses CVE-2025-22871
+  Resolves: RHEL-90009
+
+* Tue Mar 25 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-9
+- Bump revision
+- Update golang-jwt v5.2.1 to v5.2.2
+- Update addresses CVE-2025-30204
+  Resolves: RHEL-85035
+
+* Wed Mar 19 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-8
+- Bump revision
+- Update go-jose v4.0.2 to v4.0.5
+- Update testify v1.9.0 to v1.10.0
+- Update addresses CVE-2025-27144
+  Resolves: RHEL-84160
+
+* Wed Mar 19 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-7
+- Bump revision
+- Update expr v1.16.9 to v1.17.0
+- Update addresses CVE-2025-29786
+  Resolves: RHEL-84153
+
+* Tue Mar 18 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-6
+- Bump revision
+- Update Golang v1.22.11 to v1.23.0
+- Update x/oauth2 v0.22.0 to v0.27.0
+- Update addresses CVE-2025-22868
+  Resolves: RHEL-84025
+
+* Mon Mar 03 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-5
+- Bump revision
+- Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
+- Modify pre-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
+  Resolves: RHEL-76915
+
+* Wed Feb 12 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-4
+- Bump revision
+- Fix reversion of previous dependency updates post golang update
+  Resolves: RHEL-79109
+
+* Tue Feb 11 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-3
+- Bump revision
+- Update tarball golang from 1.21.0 to 1.22.11
+- Update addresses CVE-2024-45336
+  Resolves: RHEL-78944
+
+* Fri Feb 07 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-2
+- Bump revision
+- Update tarball name to match upstream
+- Upgrade the following tarball dependencies:
+- x/sys v0.23.0 to v0.29.0
+- x/crypto v0.26.0 to v0.32.0
+- x/net v0.28.0 to v0.33.0
+- x/sync v0.8.0 to v0.10.0
+- x/term v0.23.0 to v0.28.0
+- x/text v0.17.0 to v0.21.0
+- Update addresses the following CVEs:
+- CVE-2024-45338
+- CVE-2024-45337
+  Resolves: RHEL-78346
+
+* Thu Nov 28 2024 Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
+- Version bump to 0.107.0
+- Reset release to 1
+- Update addresses the following CVEs:
+- CVE-2024-34155
+- CVE-2024-34156
+- CVE-2024-42368
+
+* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 0.102.1-6
+- Bump release for October 2024 mass rebuild:
+  Resolves: RHEL-64018
+
+* Mon Sep 09 2024 Major Hayden <major@redhat.com> - 0.102.1-5
+- Rebuilt for C10S/RHEL 10
+
+* Mon Aug 19 2024 Felix Kolwa <fkolwa@redhat.com> - 0.102.1-4
+- include aarch64 build target
+* Thu Aug 01 2024 Benedikt Bongartz <bongartz@redhat.com> - 0.102.1-3
+- Add default selinux policy for journald receiver
+- Bump revision
+* Wed Jul 24 2024 Benedikt Bongartz <bongartz@redhat.com> - 0.102.1-2
+- spec: strip go binary
+* Tue Jul 16 2024 Benedikt Bongartz <bongartz@redhat.com> - 0.102.1-1
+- rpm: trim date (#89) (Ben B)
+- Add transform processor (#88) (Ruben Vargas)
+* Fri Jun 28 2024 Benedikt Bongartz <bongartz@redhat.com> - 0.102.1
+- move microshift specifics into another rpm
+- bump collector version to 0.102.0
+* Fri Apr 12 2024 Benedikt Bongartz <bongartz@redhat.com> - 0.95.0
+- add observability user that is part of the systemd-journal group
+- add opentelemetry collector config folder (`/etc/opentelemetry-collector/configs`)
+- add opentelemetry collector default config
+- add microshift manifests
+* Thu Feb 1 21:59:10 CET 2024 Nina Olear <nolear@redhat.com> - 0.93.4
+- First package for Copr

gating.yaml

@@ -0,0 +1,6 @@
+--- !Policy
+product_versions:
+  - rhel-10
+decision_context: osci_compose_gate
+rules:
+  - !PassingTestCaseRule {test_case_name: osci.brew-build.tier0.functional}

opentelemetry-collector.spec

@@ -1,13 +1,3 @@
-## START: Set by rpmautospec
-## (rpmautospec version 0.6.5)
-## RPMAUTOSPEC: autorelease, autochangelog
-%define autorelease(e:s:pb:n) %{?-p:0.}%{lua:
-    release_number = 2;
-    base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}"));
-    print(release_number + base_release_number - 1);
-}%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}}
-## END: Set by rpmautospec
-
 %global goipath         github.com/os-observability/redhat-opentelemetry-collector
 
 Version:                0.135.0
@@ -117,115 +107,4 @@ fi
 %{_bindir}/*
 
 %changelog
-## START: Generated by rpmautospec
-* Wed Dec 17 2025 Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-2
-- Update Expr to v1.17.7 - Addresses CVE-2025-68156 - Resolves: RHEL-136443
-
-* Wed Oct 08 2025 Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-1
-- Version bump to 0.135.0 Add systemd-journal group to Requires Bump go-
-  tpm-keyfiles Resolves: RHEL-119363
-
-* Mon Aug 11 2025 Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-3
-- Go version update to v1.24.4
-
-* Tue Jun 10 2025 Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
-- Collector version update
-- Go version update to v1.23.9
-- Update addresses CVE-2025-22871
-  Resolves: RHEL-90009
-
-* Tue Mar 25 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-9
-- Bump revision
-- Update golang-jwt v5.2.1 to v5.2.2
-- Update addresses CVE-2025-30204
-  Resolves: RHEL-85035
-
-* Wed Mar 19 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-8
-- Bump revision
-- Update go-jose v4.0.2 to v4.0.5
-- Update testify v1.9.0 to v1.10.0
-- Update addresses CVE-2025-27144
-  Resolves: RHEL-84160
-
-* Wed Mar 19 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-7
-- Bump revision
-- Update expr v1.16.9 to v1.17.0
-- Update addresses CVE-2025-29786
-  Resolves: RHEL-84153
-
-* Tue Mar 18 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-6
-- Bump revision
-- Update Golang v1.22.11 to v1.23.0
-- Update x/oauth2 v0.22.0 to v0.27.0
-- Update addresses CVE-2025-22868
-  Resolves: RHEL-84025
-
-* Mon Mar 03 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-5
-- Bump revision
-- Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
-- Modify pre-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
-  Resolves: RHEL-76915
-
-* Wed Feb 12 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-4
-- Bump revision
-- Fix reversion of previous dependency updates post golang update
-  Resolves: RHEL-79109
-
-* Tue Feb 11 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-3
-- Bump revision
-- Update tarball golang from 1.21.0 to 1.22.11
-- Update addresses CVE-2024-45336
-  Resolves: RHEL-78944
-
-* Fri Feb 07 2025 Conor Cowman <ccowman@redhat.com> - 0.107.0-2
-- Bump revision
-- Update tarball name to match upstream
-- Upgrade the following tarball dependencies:
-- x/sys v0.23.0 to v0.29.0
-- x/crypto v0.26.0 to v0.32.0
-- x/net v0.28.0 to v0.33.0
-- x/sync v0.8.0 to v0.10.0
-- x/term v0.23.0 to v0.28.0
-- x/text v0.17.0 to v0.21.0
-- Update addresses the following CVEs:
-- CVE-2024-45338
-- CVE-2024-45337
-  Resolves: RHEL-78346
-
-* Thu Nov 28 2024 Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
-- Version bump to 0.107.0
-- Reset release to 1
-- Update addresses the following CVEs:
-- CVE-2024-34155
-- CVE-2024-34156
-- CVE-2024-42368
-
-* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 0.102.1-6
-- Bump release for October 2024 mass rebuild:
-  Resolves: RHEL-64018
-
-* Mon Sep 09 2024 Major Hayden <major@redhat.com> - 0.102.1-5
-- Rebuilt for C10S/RHEL 10
-
-* Mon Aug 19 2024 Felix Kolwa <fkolwa@redhat.com> - 0.102.1-4
-- include aarch64 build target
-* Thu Aug 01 2024 Benedikt Bongartz <bongartz@redhat.com> - 0.102.1-3
-- Add default selinux policy for journald receiver
-- Bump revision
-* Wed Jul 24 2024 Benedikt Bongartz <bongartz@redhat.com> - 0.102.1-2
-- spec: strip go binary
-* Tue Jul 16 2024 Benedikt Bongartz <bongartz@redhat.com> - 0.102.1-1
-- rpm: trim date (#89) (Ben B)
-- Add transform processor (#88) (Ruben Vargas)
-* Fri Jun 28 2024 Benedikt Bongartz <bongartz@redhat.com> - 0.102.1
-- move microshift specifics into another rpm
-- bump collector version to 0.102.0
-* Fri Apr 12 2024 Benedikt Bongartz <bongartz@redhat.com> - 0.95.0
-- add observability user that is part of the systemd-journal group
-- add opentelemetry collector config folder (`/etc/opentelemetry-collector/configs`)
-- add opentelemetry collector default config
-- add microshift manifests
-* Thu Feb 1 21:59:10 CET 2024 Nina Olear <nolear@redhat.com> - 0.93.4
-- First package for Copr
-
-## END: Generated by rpmautospec
+%autochangelog