chore(deps): update otel/weaver docker tag to v0.20.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
otel/weaver	final	minor	v0.19.0 -> v0.20.0

---

Release Notes

open-telemetry/weaver (otel/weaver)

v0.20.0: 0.20.0 - 2025-12-11

Compare Source

Release Notes

• Add support for V2 schema in weaver diff (#​1053 by @​jsuereth)
• Add support for V2 schema in JQ helpers (#​1058 by @​lmolkova)
• Add support for V2 schema in weaver_forge (#​980 by @​jsuereth)
• Add support for V2 schema in weaver check (#​1016 by @​jsuereth)
• Add support for V2 schema in emit (#​1019 by @​jerbly)
• Add support for V2 schema in live-check (#​1022 by @​jerbly)
• 💥 BREAKING CHANGE 💥 Violation and Advice have been renamed
  to PolicyFinding. We now use the same structure between all
  rego policies in weaver. (#​1038 by @​jsuereth)
• Add Log support for emit and live-check (#​1042 by @​jerbly)
• Add OTLP log emission for policy findings in live-check. Whenever a PolicyFinding is created, a log_record is emitted to your configured OTLP endpoint. (#​1045 by @​jerbly)
• Deprecate weaver registry search command. This command is not compatible with V2 schema and will be removed in a future version. Users should search the generated documentation instead. (#​1057 by @​jerbly)
• Add support for continuous live-check sessions with --inactivity-timeout=0, --output=none and --no-stats (#​1066 by @​jerbly)

Install weaver 0.20.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.20.0/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.20.0/weaver-installer.ps1 | iex"

Download weaver 0.20.0

File	Platform	Checksum
weaver-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
weaver-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
weaver-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
weaver-x86_64-pc-windows-msvc.msi	x64 Windows	checksum
weaver-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

---

Configuration

📅 Schedule: Branch creation - "before 8am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.