Skip to content

0.20.0 - 2025-12-11

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 11 Dec 13:40
v0.20.0
c086a29
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release Notes

  • Add support for V2 schema in weaver diff (#1053 by @jsuereth)
  • Add support for V2 schema in JQ helpers (#1058 by @lmolkova)
  • Add support for V2 schema in weaver_forge (#980 by @jsuereth)
  • Add support for V2 schema in weaver check (#1016 by @jsuereth)
  • Add support for V2 schema in emit (#1019 by @jerbly)
  • Add support for V2 schema in live-check (#1022 by @jerbly)
  • 💥 BREAKING CHANGE 💥 Violation and Advice have been renamed
    to PolicyFinding. We now use the same structure between all
    rego policies in weaver. (#1038 by @jsuereth)
  • Add Log support for emit and live-check (#1042 by @jerbly)
  • Add OTLP log emission for policy findings in live-check. Whenever a PolicyFinding is created, a log_record is emitted to your configured OTLP endpoint. (#1045 by @jerbly)
  • Deprecate weaver registry search command. This command is not compatible with V2 schema and will be removed in a future version. Users should search the generated documentation instead. (#1057 by @jerbly)
  • Add support for continuous live-check sessions with --inactivity-timeout=0, --output=none and --no-stats (#1066 by @jerbly)

Install weaver 0.20.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.20.0/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.20.0/weaver-installer.ps1 | iex"

Download weaver 0.20.0

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Contributors

jsuereth, jerbly, and lmolkova
Assets 18
Loading