Skip to content

Update opentelemetry to 0.32#1698

Open
spacebear21 wants to merge 1 commit into
payjoin:masterfrom
spacebear21:update-otel-0.32
Open

Update opentelemetry to 0.32#1698
spacebear21 wants to merge 1 commit into
payjoin:masterfrom
spacebear21:update-otel-0.32

Conversation

@spacebear21

Copy link
Copy Markdown
Collaborator

This addresses a Dependabot report about unbounded memory allocation GHSA-w9wp-h8wv-79jx

Pull Request Checklist

Please confirm the following before requesting review:

@benalleng

benalleng commented Jul 3, 2026

Copy link
Copy Markdown
Collaborator

Annoyingly the opentelemetry-http dep drops ring as the default crypto provider. instead it uses aws-lc-rs even though opentelemetry-otlp claims to have a crypto agnostic feature

@coveralls

coveralls commented Jul 3, 2026

Copy link
Copy Markdown
Collaborator

Coverage Report for CI Build 28681214343

Coverage remained the same at 85.938%

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 15538
Covered Lines: 13353
Line Coverage: 85.94%
Coverage Strength: 350.92 hits per line

💛 - Coveralls

This addresses a Dependabot report about unbounded memory allocation
GHSA-w9wp-h8wv-79jx
@benalleng

Copy link
Copy Markdown
Collaborator

I found we could drop reqwest-rustls for the more minimal http-proto. Not sure if there is something missing we would want there but it linted ok.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants