Skip to content

chore: bump OTLP exporters to v1.43.0 - #1162

Merged
lidel merged 1 commit into
mainfrom
fix/otlptrace-http-cve-2026-39882
May 28, 2026
Merged

chore: bump OTLP exporters to v1.43.0#1162
lidel merged 1 commit into
mainfrom
fix/otlptrace-http-cve-2026-39882

Conversation

@lidel

@lidel lidel commented May 28, 2026

Copy link
Copy Markdown
Member

Bump go.opentelemetry.io/otel OTLP exporters to v1.43.0

Bump go.opentelemetry.io/otel OTLP exporters to v1.43.0, which caps
the HTTP exporter's response body at 4 MiB. A hostile or
man-in-the-middle collector could otherwise exhaust its memory
(CVE-2026-39882). The gRPC exporter is unaffected.
@lidel
lidel requested a review from a team as a code owner May 28, 2026 09:59
@codecov

codecov Bot commented May 28, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 63.38%. Comparing base (71d6e88) to head (760bee8).

Impacted file tree graph

@@            Coverage Diff             @@
##             main    #1162      +/-   ##
==========================================
- Coverage   63.39%   63.38%   -0.01%     
==========================================
  Files         268      268              
  Lines       26967    26967              
==========================================
- Hits        17095    17093       -2     
  Misses       8150     8150              
- Partials     1722     1724       +2     

see 8 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@lidel
lidel merged commit 9bf84ae into main May 28, 2026
29 of 30 checks passed
@lidel
lidel deleted the fix/otlptrace-http-cve-2026-39882 branch May 28, 2026 10:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants