-
Notifications
You must be signed in to change notification settings - Fork 270
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
opentelemetry-collector/0.115.0-r0: cve remediation #36751
opentelemetry-collector/0.115.0-r0: cve remediation #36751
Conversation
Gen AI suggestions to solve the build error: Based on the build output and error pattern analysis, here's my response: • Detected Error: The build appears to fail silently after the git checkout step, suggesting a failure in the subsequent go/bump or go/build steps • Error Category: Build Configuration • Failure Point: After git checkout, likely during the go/bump step • Root Cause Analysis: The modroot path "./cmd/builder" appears incorrect, as the OpenTelemetry Collector repository structure has changed in recent versions • Suggested Fix: - uses: go/bump
with:
deps: golang.org/x/[email protected]
modroot: ./cmd/otelcorecol
- uses: go/build
with:
packages: .
modroot: ./cmd/otelcorecol
output: ocb • Explanation:
• Additional Notes:
• References:
|
Gen AI suggestions to solve the build error: • Detected Error: Missing go build error in output, but context suggests failure in build configuration • Error Category: Build Configuration • Failure Point: The go/build step for the OpenTelemetry Collector builder • Root Cause Analysis: The issue appears to be related to the way the go/build step is configured. The modroot is pointing to ./cmd/builder but trying to build "." which may be causing a mismatch. • Suggested Fix: - uses: go/build
with:
packages: ./cmd/builder
modroot: .
output: ocb • Explanation:
• Additional Notes:
• References:
This fix ensures the builder is compiled correctly before it's used to build the actual collector binary in the subsequent step. |
Signed-off-by: Batuhan Apaydin <[email protected]>
1041bf1
to
10243be
Compare
opentelemetry-collector/0.115.0-r0: fix GHSA-v778-237x-gjrc
Advisory data: https://github.com/wolfi-dev/advisories/blob/main/opentelemetry-collector.advisories.yaml