Skip to content

fix(deps): bump knative.dev/pkg to align OTel semconv versions#1802

Closed
infernus01 wants to merge 1 commit into
tektoncd:dependabot/go_modules/all-ae4e167892from
infernus01:fix/pin-otel-sdk-1801
Closed

fix(deps): bump knative.dev/pkg to align OTel semconv versions#1802
infernus01 wants to merge 1 commit into
tektoncd:dependabot/go_modules/all-ae4e167892from
infernus01:fix/pin-otel-sdk-1801

Conversation

@infernus01

Copy link
Copy Markdown
Member

Changes

Fixes the E2E test failures in #1801.

The dependency bumps in #1801 transitively require
go.opentelemetry.io/otel/sdk v1.44.0, which uses semconv/v1.41.0.
The previously vendored knative.dev/pkg (May 31 snapshot) uses
semconv/v1.40.0. At controller startup, knative.dev/pkg's
observability/resource.Default() merges two OTel resources with
conflicting schema URLs and panics:

  panic: conflicting Schema URL:
    https://opentelemetry.io/schemas/1.41.0 and https://opentelemetry.io/schemas/1.40.0

This crashes the controller with exit code 2 (CrashLoopBackOff) before
any E2E test can run. Pinning otel/sdk at v1.43.0 is not viable
because both cloud.google.com/go/storage@v1.63.0 and
github.com/sigstore/rekor@v1.5.3 require v1.44.0.

Fix: Bump knative.dev/pkg from v0.0.0-20260531000007 (May 31)
to v0.0.0-20260622140654 (June 22), which uses semconv/v1.41.0
matching the OTel SDK. Both sides of resource.Merge() now agree on
the schema URL.

Submitter Checklist

As the author of this PR, please check off the items in this checklist:

  • Has Docs included if any changes are user facing
  • Has Tests included if any functionality added or changed
  • Follows the commit message standard
  • Meets the Tekton contributor standards (including
    functionality, content, code)
  • Release notes block below has been updated with any user facing changes (API changes, bug fixes, changes requiring upgrade notices or deprecation warnings)
  • Release notes contains the string "action required" if the change requires additional action from users switching to the new release

Release Notes

NONE

The dependency bumps in this PR transitively require
go.opentelemetry.io/otel/sdk v1.44.0, which uses semconv/v1.41.0.
The previously vendored knative.dev/pkg (May 31 snapshot) uses
semconv/v1.40.0. At controller startup, knative's
observability/resource.Default() merges OTel resources with
conflicting schema URLs and panics:

  panic: conflicting Schema URL:
    https://opentelemetry.io/schemas/1.41.0
    and https://opentelemetry.io/schemas/1.40.0

This crashes the controller (exit code 2, CrashLoopBackOff) and
fails all E2E tests.

Bump knative.dev/pkg to the June 22 snapshot which uses
semconv/v1.41.0, aligning both sides of the resource.Merge() call.

Signed-off-by: Shubham Bhardwaj <shubham.bhardwaj@outlook.com>
@tekton-robot

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To complete the pull request process, please ask for approval from infernus01 after the PR has been reviewed.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label Jul 17, 2026
@dependabot
dependabot Bot deleted the branch tektoncd:dependabot/go_modules/all-ae4e167892 July 17, 2026 14:14
@dependabot dependabot Bot closed this Jul 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants