Skip to content

v2.33.0 post release changes - #3148

Merged
laurit merged 6 commits into
mainfrom
post-release-changes-v2.33.0
Oct 27, 2026
Merged

laurit merged 6 commits into
mainfrom
post-release-changes-v2.33.0

Conversation

@srv-gh-o11y-gdi

Copy link
Copy Markdown
Collaborator

v2.33.0 post release changes

@srv-gh-o11y-gdi
srv-gh-o11y-gdi requested review from a team as code owners October 26, 2026 09:50
@srv-gh-o11y-gdi srv-gh-o11y-gdi added the automated PR or issue created by an automated process label Oct 26, 2026
@srv-gh-o11y-gdi
srv-gh-o11y-gdi requested a review from a team as a code owner October 26, 2026 09:50
@srv-gh-o11y-gdi srv-gh-o11y-gdi added the automated PR or issue created by an automated process label Oct 26, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-26T14:42:33.708303Z 9710891 Manual request
🔒 Security Review ✅ Completed 2026-10-26T14:44:14.721061Z 9710891 Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@laurit

laurit commented Oct 26, 2026

Copy link
Copy Markdown
Collaborator

@codex review

map,
new TextMapGetter<>() {
@Override
public Iterable<String> keys(Map<String, String> carrier) {

@laurit laurit Oct 26, 2026 •

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the keys method is deprecated and now has a default implementation that returns and empty iterable

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 97108911c4

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread README.md Outdated
import java.util.logging.Logger;

@AutoService(ComponentProvider.class)
public class TruncateCommandLineResourceDetector implements ComponentProvider {

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

removed this for now since user would need to manually enable it

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, I'm still not sure if removing it is a good solution, but maybe nobody use it...
If we leave the code and let user to add truncate_command_line_process manually to the declarative config YAML, then is it very different from setting some property in YAML instead?

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As far as I understand the problematic command args arguments are disabled by default and currently it is impossible to enable them in the declarative configuration so we don't need to truncate them. In my opinion we don't need to do anything unless someone requests a way to enable these attributes. In that case we'd first need to figure out a way to enable them in upstream and after that we'd need to either truncate them in our distro or emit a warning.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The issue I see is that for envvars config user may enable cmd-line arguments reporting by setting otel.instrumentation.resources.experimental.process-command-attributes.enabled (read by ProcessResourceProvider), but for declarative config it will be impossible. As you pointed out - there is no corresponding mechanism for declarative config yet, but if we leave this class then user will be able to specify appropriate resource detector to have very similar effect to envvar:

  • process to get a process resource without cmd args
  • truncate_command_line_process to get a process resource with truncated cmd args included

I think we don't have to enable it in the upstream first. We can remove our class later once upstream solves declarative config issue with opt-in enabling cmd line args reporting.

Anyway, let's move forward with removing it now, if you think it is OK solution.

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 97108911c4

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

// This class is loaded in the insolated instrumentation class loaded we expose it to
// application class loader so that tests can temporarily disable instrumentation to read
// tracing state.
return Boolean.getBoolean("jdbcTestMode")

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is needed because of switching to non-inline advice. An alternative is to use reflection in the test to get access to the isolated instrumentation class loader and load the class from there. That approach is used in a couple of upstream tests.

import java.util.logging.Logger;

@AutoService(ComponentProvider.class)
public class TruncateCommandLineResourceDetector implements ComponentProvider {

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, I'm still not sure if removing it is a good solution, but maybe nobody use it...
If we leave the code and let user to add truncate_command_line_process manually to the declarative config YAML, then is it very different from setting some property in YAML instead?

val otelVersion = "1.67.0"
val otelAlphaVersion = otelVersion.replaceFirst("(-SNAPSHOT)?$".toRegex(), "-alpha$1")
val otelInstrumentationVersion = "2.33.0"
val otelInstrumentationVersion = "3.0.0-SNAPSHOT"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should decide if we want to do a 2.33.1 patch before merging this I suppose.

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

no, patch releases are made from a branch as described in the release instructions. For further minor releases for 2.x series we'll need to create a separate branch similarly to upstream maintenance/v2.x branch and update the release instructions.

@laurit
laurit merged commit 85af73a into main Oct 27, 2026
29 of 30 checks passed
@github-actions github-actions Bot locked and limited conversation to collaborators Oct 27, 2026
@laurit
laurit deleted the post-release-changes-v2.33.0 branch October 27, 2026 09:13
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

automated PR or issue created by an automated process

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants