Update All OpenTelemetry Collector packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
go.opentelemetry.io/collector/cmd/builder	v0.103.0 -> v0.103.1
go.opentelemetry.io/collector/receiver	v0.95.0 -> v0.103.0

---

Release Notes

open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/receiver)

v0.103.0

Compare Source

🛑 Breaking changes 🛑

• exporter/debug: Disable sampling by default (#​9921)
  To restore the behavior that was previously the default, set sampling_thereafter to 500.

💡 Enhancements 💡

• cmd/builder: Allow setting otelcol.CollectorSettings.ResolverSettings.DefaultScheme via the builder's conf_resolver.default_uri_scheme configuration option (#​10296)
• mdatagen: add support for optional internal metrics (#​10316)
• otelcol/expandconverter: Add confmap.unifyEnvVarExpansion feature gate to allow enabling Collector/Configuration SIG environment variable expansion rules. (#​10391)
  When enabled, this feature gate will:
  • Disable expansion of BASH-style env vars ($FOO)
  • ${FOO} will be expanded as if it was `${env:FOO}
    See https://github.com/open-telemetry/opentelemetry-collector/blob/main/docs/rfcs/env-vars.md for more details.
• confmap: Add confmap.unifyEnvVarExpansion feature gate to allow enabling Collector/Configuration SIG environment variable expansion rules. (#​10259)
  When enabled, this feature gate will:
  • Disable expansion of BASH-style env vars ($FOO)
  • ${FOO} will be expanded as if it was `${env:FOO}
    See https://github.com/open-telemetry/opentelemetry-collector/blob/main/docs/rfcs/env-vars.md for more details.
• confighttp: Allow the compression list to be overridden (#​10295)
  Allows Collector administrators to control which compression algorithms to enable for HTTP-based receivers.
• configgrpc: Revert the zstd compression for gRPC to the third-party library we were using previously. (#​10394)
  We switched back to our compression logic for zstd when a CVE was found on the third-party library we were using. Now that the third-party library has been fixed, we can revert to that one. For end-users, this has no practical effect. The reproducers for the CVE were tested against this patch, confirming we are not reintroducing the bugs.
• confmap: Adds alpha confmap.strictlyTypedInput feature gate that enables strict type checks during configuration resolution (#​9532)
  When enabled, the configuration resolution system will:
  • Stop doing most kinds of implicit type casting when resolving configuration values
  • Use the original string representation of configuration values if the ${} syntax is used in inline position
• confighttp: Use confighttp.ServerConfig as part of zpagesextension. See [https://github.com/open-telemetry/opentelemetry-collector/blob/main/config/confighttp/README.md#server-configuration]\(server configuration) options. (#​9368)

🧰 Bug fixes 🧰

• exporterhelper: Fix potential deadlock in the batch sender (#​10315)
• expandconverter: Fix bug where an warning was logged incorrectly. (#​10392)
• exporterhelper: Fix a bug when the retry and timeout logic was not applied with enabled batching. (#​10166)
• exporterhelper: Fix a bug where an unstarted batch_sender exporter hangs on shutdown (#​10306)
• exporterhelper: Fix small batch due to unfavorable goroutine scheduling in batch sender (#​9952)
• confmap: Fix issue where structs with only yaml tags were not marshaled correctly. (#​10282)

v0.102.1

Compare Source

This release addresses GHSA-c74f-6mfw-mm4v for configgrpc.

🧰 Bug fixes 🧰

• configrpc: Use own compressors for zstd. Before this change, the zstd compressor we used didn't respect the max message size. This addresses GHSA-c74f-6mfw-mm4v for configgrpc (#​10323)

v0.102.0

Compare Source

This release addresses GHSA-c74f-6mfw-mm4v for confighttp.

🛑 Breaking changes 🛑

• envprovider: Restricts Environment Variable names. Environment variable names must now be ASCII only and start with a letter or an underscore, and can only contain underscores, letters, or numbers. (#​9531)
• confighttp: Apply MaxRequestBodySize to the result of a decompressed body. This addresses GHSA-c74f-6mfw-mm4v for confighttp (#​10289)
  When using compressed payloads, the Collector would verify only the size of the compressed payload.
  This change applies the same restriction to the decompressed content. As a security measure, a limit of 20 MiB was added, which makes this a breaking change.
  For most clients, this shouldn't be a problem, but if you often have payloads that decompress to more than 20 MiB, you might want to either configure your
  client to send smaller batches (recommended), or increase the limit using the MaxRequestBodySize option.

💡 Enhancements 💡

• mdatagen: auto-generate utilities to test component telemetry (#​19783)
• mdatagen: support setting an AttributeSet for async instruments (#​9674)
• mdatagen: support using telemetry level in telemetry builder (#​10234)
  This allows components to set the minimum level needed for them to produce telemetry. By default, this is set to configtelemetry.LevelBasic. If the telemetry level is below that minimum level, then the noop meter is used for metrics.
• mdatagen: add support for bucket boundaries for histograms (#​10218)
• releases: add documentation in how to verify the image signatures using cosign (#​9610)

🧰 Bug fixes 🧰

• batchprocessor: ensure attributes are set on cardinality metadata metric (#​9674)
• batchprocessor: Fixing processor_batch_metadata_cardinality which was broken in v0.101.0 (#​10231)
• batchprocessor: respect telemetry level for all metrics (#​10234)
• exporterhelper: Fix potential deadlocks in BatcherSender shutdown (#​10255)

v0.101.0

Compare Source

💡 Enhancements 💡

• mdatagen: generate documentation for internal telemetry (#​10170)

• mdatagen: add ability to use metadata.yaml to automatically generate instruments for components (#​10054)
  The telemetry section in metadata.yaml is used to generate
  instruments for components to measure telemetry about themselves.

• confmap: Allow Converters to write logs during startup (#​10135)

• otelcol: Enable logging during configuration resolution (#​10056)

🧰 Bug fixes 🧰

• mdatagen: Run package tests when goleak is skipped (#​10125)

v0.100.0

Compare Source

🛑 Breaking changes 🛑

• service: The validate sub-command no longer validates that each pipeline's type is the same as its component types (#​10031)

💡 Enhancements 💡

• semconv: Add support for v1.25.0 semantic convention (#​10072)
• builder: remove the need to go get a module to address ambiguous import paths (#​10015)
• pmetric: Support parsing metric.metadata from OTLP JSON. (#​10026)

🧰 Bug fixes 🧰

• exporterhelper: Fix enabled config option for batch sender (#​10076)

v0.99.0

Compare Source

🛑 Breaking changes 🛑

• builder: Add strict version checking when using the builder. Add the temporary flag --skip-strict-versioning for skipping this check. (#​9896)
  Strict version checking will error on major and minor version mismatches
  between the otelcol_version configured and the builder version or versions
  in the go.mod. This check can be temporarily disabled by using the --skip-strict-versioning
  flag. This flag will be removed in a future minor version.

• telemetry: Distributed internal metrics across different levels. (#​7890)
  The internal metrics levels are updated along with reported metrics:

  • The default level is changed from basic to normal, which can be overridden with service::telmetry::metrics::level configuration.
  • Batch processor metrics are updated to be reported starting from normal level:
    • processor_batch_batch_send_size
    • processor_batch_metadata_cardinality
    • processor_batch_timeout_trigger_send
    • processor_batch_size_trigger_send
  • GRPC/HTTP server and client metrics are updated to be reported starting from detailed level:
    • http.client.* metrics
    • http.server.* metrics
    • rpc.server.* metrics
    • rpc.client.* metrics

💡 Enhancements 💡

• confighttp: Disable concurrency in zstd compression (#​8216)

• cmd/builder: Allow configuring confmap.Providers in the builder. (#​4759)
  If no providers are specified, the defaults are used.
  The default providers are: env, file, http, https, and yaml.

  To configure providers, use the providers key in your OCB build
  manifest with a list of Go modules for your providers.
  The modules will work the same as other Collector components.

• mdatagen: enable goleak tests by default via mdatagen (#​9959)

• cmd/mdatagen: support excluding some metrics based on string and regexes in resource_attributes (#​9661)

• cmd/mdatagen: Generate config and factory tests covering their requirements. (#​9940)
  The tests are moved from cmd/builder.

• confmap: Add ProviderSettings, ConverterSettings, ProviderFactories, and ConverterFactories fields to confmap.ResolverSettings (#​9516)
  This allows configuring providers and converters, which are instantiated by NewResolver using the given factories.

🧰 Bug fixes 🧰

• exporter/otlp: Allow DNS scheme to be used in endpoint (#​4274)
• service: fix record sampler configuration (#​9968)
• service: ensure the tracer provider is configured via go.opentelemetry.io/contrib/config (#​9967)
• otlphttpexporter: Fixes a bug that was preventing the otlp http exporter from propagating status. (#​9892)
• confmap: Fix decoding negative configuration values into uints (#​9060)

v0.98.0

Compare Source

🛑 Breaking changes 🛑

• service: emit internal collector metrics with _ instead of / with OTLP export (#​9774)
  This is addressing an issue w/ the names of the metrics generated by the Collector for its
  internal metrics. Note that this change only impacts users that emit telemetry using OTLP, which
  is currently still in experimental support. The prometheus metrics already replaced / with _
  and they will do the same with _.

💡 Enhancements 💡

• mdatagen: Adds unsupported platforms to the README header (#​9794)
• confmap: Clarify the use of embedded structs to make unmarshaling composable (#​7101)
• nopexporter: Promote the nopexporter to beta (#​7316)
• nopreceiver: Promote the nopreceiver to beta (#​7316)
• otlpexporter: Checks for port in the config validation for the otlpexporter (#​9505)
• service: Validate pipeline type against component types (#​8007)

🧰 Bug fixes 🧰

• configtls: Fix issue where IncludeSystemCACertsPool was not consistently used between ServerConfig and ClientConfig. (#​9835)
• component: Fix issue where the components command wasn't properly printing the component type. (#​9856)
• otelcol: Fix issue where the validate command wasn't properly printing valid component type. (#​9866)
• receiver/otlp: Fix bug where the otlp receiver did not properly respond with a retryable error code when possible for http (#​9357)

v0.97.0

Compare Source

🛑 Breaking changes 🛑

• telemetry: Remove telemetry.useOtelForInternalMetrics stable feature gate (#​9752)

🚀 New components 🚀

• exporter/nop: Add the nopexporter to serve as a placeholder exporter in a pipeline (#​7316)
  This is primarily useful for starting the Collector with only extensions enabled
  or to test Collector pipeline throughput.

• receiver/nop: Add the nopreceiver to serve as a placeholder receiver in a pipeline (#​7316)
  This is primarily useful for starting the Collector with only extensions enabled.

💡 Enhancements 💡

• configtls: Validates TLS min_version and max_version (#​9475)
  Introduces Validate() method in TLSSetting.

• configcompression: Mark module as Stable. (#​9571)

• cmd/mdatagen: Use go package name for the scope name by default and add an option to provide the scope name in metadata.yaml. (#​9693)

• cmd/mdatagen: Generate the lifecycle tests for components by default. (#​9683)
  It's encouraged to have lifecycle tests for all components enadled, but they can be disabled if needed
  in metadata.yaml with skip_lifecycle: true and skip_shutdown: true under tests section.

• cmd/mdatagen: optimize the mdatagen for the case like batchprocessor which use a common struct to implement consumer.Traces, consumer.Metrics, consumer.Logs in the meantime. (#​9688)

🧰 Bug fixes 🧰

• exporterhelper: Fix persistent queue size backup on reads. (#​9740)
• processor/batch: Prevent starting unnecessary goroutines. (#​9739)
• otlphttpexporter: prevent error on empty response body when content type is application/json (#​9666)
• confmap: confmap honors Unmarshal methods on config embedded structs. (#​6671)
• otelcol: Respect telemetry configuration when running as a Windows service (#​5300)

v0.96.0

Compare Source

🛑 Breaking changes 🛑

• configgrpc: Remove deprecated GRPCClientSettings, GRPCServerSettings, and ServerConfig.ToListenerContext. (#​9616)
• confighttp: Remove deprecated HTTPClientSettings, NewDefaultHTTPClientSettings, and CORSSettings. (#​9625)
• confignet: Removes deprecated NetAddr and TCPAddr (#​9614)

💡 Enhancements 💡

• configtls: Add include_system_ca_certs_pool to configtls, allowing to load system certs and additional custom certs. (#​7774)
• otelcol: Add ConfigProviderSettings to CollectorSettings (#​4759)
  This allows passing a custom list of confmap.Providers to otelcol.NewCommand.
• pdata: Update to OTLP v1.1.0 (#​9587)
  Introduces Span and SpanLink flags.
• confmap: Update mapstructure to use a maintained fork, github.com/go-viper/mapstructure/v2. (#​9634)
  https://github.com/mitchellh/mapstructure/issues/349/349 for context.

🧰 Bug fixes 🧰

• configretry: Allow max_elapsed_time to be set to 0 for indefinite retries (#​9641)
• client: Make Metadata.Get thread safe (#​9595)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

ℹ Artifact update notice

File name: receiver/runnreceiver/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
go.opentelemetry.io/collector	v0.95.0 -> v0.103.0
golang.org/x/net	v0.24.0 -> v0.25.0
google.golang.org/genproto/googleapis/api	v0.0.0-20240415180920-8c6c420018be -> v0.0.0-20240520151616-dc85e6b867a5
google.golang.org/genproto/googleapis/rpc	v0.0.0-20240415180920-8c6c420018be -> v0.0.0-20240520151616-dc85e6b867a5