Update otel/weaver Docker tag to v0.25.0 (main)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
otel/weaver	stage	minor	v0.24.2 → v0.25.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

open-telemetry/weaver (otel/weaver)

v0.25.0: 0.25.0 - 2026-07-24

Compare Source

Release Notes

• Use semantic conventions v2 for weaver registry infer. (#​1334 by @​ArthurSens)
• 💥 BREAKING CHANGE 💥Expand dependency conflict resolution to allow different versions of a dependency when their major versions are compatible. Llatest version in the major series wins. (#​1573 by @​jsuereth)
  • This expands flexibility of schema resolution to allow dependency version conflicts to be resolved using major version number.
  • This release breaks dependencies that were not following the SchemaURL specification, requiring a semantic version as
    the last section of the URL.
• Add --fail-on <violation|improvement|information|none> to weaver registry live-check to choose the severity threshold that produces a non-zero exit code. (#​1517 by @​cijothomas)
• Fix (#​733) - default an enum member's value to its id when no explicit value is provided. (#​1444 by @​nanookclaw)
• Regenerate the weaver-config.json JSON schema so it matches the current configuration. (#​1606 by @​jerbly)
• Live-check: (Fixes: #​1626) fix a shutdown race where live-check --output http could exit before the /stop response was fully delivered, resetting the connection on large reports. The live-check command now waits for the admin HTTP server's graceful shutdown to finish before exiting. (#​1632 by @​jerbly)
• Live-check: (Fixes: #​1614) add [[live-check.finding_level_overrides]] to rewrite a finding's level instead of dropping it (e.g. treat undefined_enum_variant as a violation), scoped by the same signal_type/sample_names rules as finding_filters. (#​1625 by @​jerbly)
• Change v2 refinement attribute precedence so ref_group details win over inherited attributes. (#​1604 by @​lmolkova)
• Make deprecated.note optional for {reason: renamed} - inferred from renamed_to. (#​1622 by @​lmolkova)
• Add v2 entity refinements to the resolved and materialized schema, allow to refine attributes without changing entity identity. (#​1588 by @​lmolkova)
• Live-check: (Fixes: #​1613) add sample_names to [[live-check.finding_filters]] to scope a filter to matching sample names, with glob wildcard support (also added to exclude_samples). (#​1619 by @​jerbly)
• Add a tree view to the serve UI's search page, grouping results by namespace with expand/collapse controls, and a "Hide deprecated" toggle (on by default) for both the list and tree views. (#​1595 by @​jerbly)
• Support signal refinements over a published dependency. (#​1587 by @​lmolkova)
• 💥 BREAKING CHANGE 💥 Preserve per-attribute requirement_level on attribute refs of public attribute groups in the v2 resolved and materialized schemas. Each entry in an attribute group's attributes is now an object ({ base, requirement_level }) instead of a bare attribute_catalog index. (#​1584 by @​lmolkova)
• Use the OS-native certificate store (via ureq's platform-verifier feature) to validate TLS connections for remote registry downloads, instead of a fixed bundled root CA list. (#​1583 by @​jerbly)
• Fix panic when a registry, policy, or template path uses a commit SHA. (#​1414)
• Add a stats dashboard with charts to the serve UI. (#​1570 by @​jerbly)
• Add semconv_grouped_entities JQ helper. (#​1560 by @​lmolkova)
• Add optional when clause to template entries in weaver.yaml — a JQ expression that gates whether a template is applied. (#​1561 by @​lmolkova)
• Add [template] section to .weaver.toml with acronyms and text_maps, applied on top of every template's weaver.yaml. (#​1561 by @​lmolkova)
• Add optional name field to SpanRefinement in v2 syntax, and fix span name propagation so refinements (and imported spans) inherit the base span's name when they don't override it. (#​1403 by @​lmolkova)
• Fix registry update-markdown so it does not require registry subdirectory matching registry generate behavior. (#​1544 by @​lmolkova)
• Live-check: support loading additional Rego data from glob patterns via --advice-data. (#​1539 by @​lmolkova).
• Refactor resolution engine so we can support multiple schema urls registered
  and cached (#​1504 by @​jsuereth).
• Change --include-unreferenced so that this is the same as creating a
  a set of import: statements in the registry manifest. (#​1442 by @​jsuereth)

Install weaver 0.25.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.25.0/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.25.0/weaver-installer.ps1 | iex"

Download weaver 0.25.0

File	Platform	Checksum
weaver-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
weaver-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
weaver-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
weaver-x86_64-pc-windows-msvc.msi	x64 Windows	checksum
weaver-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
weaver-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
weaver-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
weaver-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.20%. Comparing base (ff5a8d6) to head (b315700).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1844   +/-   ##
=======================================
  Coverage   85.20%   85.20%           
=======================================
  Files         105      105           
  Lines       13777    13777           
=======================================
  Hits        11739    11739           
  Misses       1514     1514           
  Partials      524      524           

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ff5a8d6...b315700. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.