chore(deps): update otel/weaver docker tag to v0.22.1

[renovate-rancher]

This PR contains the following updates:

Package	Type	Update	Change
otel/weaver	stage	minor	v0.19.0 → v0.22.1

---

Release Notes

open-telemetry/weaver (otel/weaver)

v0.22.1: 0.22.1 - 2026-03-13

Compare Source

Release Notes

Note: 0.22.0 release was skipped due to release CI/CD issues.

• Fix: Update release workflow for pnpm migration (use pnpm lockfile instead of npm lockfile). (#​1289 by @​jerbly)
• Add support for git references in the registry url (#​182 by @​sebasnabas)
• New feature (#​1153) - Live-check now has a /health endpoint that can be used in long-running scenarios to confirm readiness and liveness of the live-check server. (#​1193 by @​jerbly)
• New feature (#​1100) - Set --output=http to have live-check send its report as the response to /stop. (#​1193 by @​jerbly)
• Unified output handling across all registry subcommands. Builtin output formats (json, yaml, jsonl) are now available in registry stats, registry diff, and registry resolve. registry stats also supports --templates for custom text output templates. (#​1200 by @​jerbly)
• New feature (#​1152) - Live-check with --emit-otlp-logs will now include the attributes from the resource in the emitted log record, this helps to identify the source of the finding in a multi-source environment. (#​1206 by @​jerbly)
• New Experimental feature: weaver registry infer command that listens for OTLP telemetry and infers a semantic convention registry file from the received data. Supports spans, metrics, events, and resource attributes. Includes configurable gRPC address/port, admin server for graceful shutdown, and inactivity timeout. (#​1138 by @​ArthurSens)
• Fix: Include unit in inferred schema even if empty to prevent live-check failures. (#​1284 by @​ArthurSens)
• Use schema_url in registry manifest, dependencies, and resolved schema instead of registry_url. Parse registry name and version
  from it. (#​1202 by @​lmolkova)
• Default to manifest.yaml for registry manifest file, deprecate registry_manifest.yaml and add warning when it's used. (#​1202 by @​lmolkova)
• 💥 BREAKING CHANGE 💥 (Fixes #​760) - Auto-escaping is now off by default (none) for all templates, regardless of file extension. To opt in, set auto_escape: html or auto_escape: json per template in weaver.yaml. Within a template, {% autoescape false %} blocks can selectively disable escaping for sections. Use |tojson for explicit JSON/YAML value escaping where needed. (#​1239 by @​jerbly)
• 💥 BREAKING CHANGE 💥 Replace version: "2" with file_format: definition/2 for v2 definition schema (#​1154 by @​lmolkova)
• Add JSON schema for resolved registry v2 (#​1261 by @​lmolkova)
• Add weaver registry package command to generate manifest and write resolved schema. (#​1254 by @​lmolkova)
• Fix: weaver registry package command not producing output due to warnings. (#​1271 by @​lmolkova)
• Update JSON Schema v2 to include file_format (#​1262 by @​lmolkova)
• Add JSON schema for PolicyFinding, make context field optional. (#​1270 by @​lmolkova)
• Deprecate weaver registry resolve command, please use weaver registry generate or package instead (#​1255 by @​lmolkova)
• Support imports for all signal types and public attribute groups in v2 registry. (#​1267 by @​jsuereth)
• Support refinements in v2 syntax: metric names, notes, etc. are now copied from the refined group. (#​1250 by @​jsuereth)
• Fix stability/ordering issues in v2 publishing; attributes are now sorted and deduplicated consistently. (#​1282 by @​jsuereth)
• Fix resolution for dependencies: both v1 and v2 resolution now returns the correct attribute from the right registry when using dependencies. (#​1280 by @​lmolkova)
• JQ helper v2 for spans: fixes and improvements. (#​1251 by @​lmolkova)
• Fix 404 on template-type attributes in the weaver serve API. (#​1240 by @​jerbly)
• New Experimental feature: weaver serve UI migrated to React. (#​1147 by @​nicolastakashi)

Install weaver 0.22.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-installer.ps1 | iex"

Download weaver 0.22.1

File	Platform	Checksum
weaver-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
weaver-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
weaver-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
weaver-x86_64-pc-windows-msvc.msi	x64 Windows	checksum
weaver-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.22.0

Compare Source

v0.21.2: 0.21.2 - 2026-02-03

Compare Source

Release Notes

• New Experimental feature: weaver serve command to serve a REST API and web UI. (#​1076 by @​jerbly)
• Add support for diff schemas in registry json-schema(#​1105 by @​lmolkova)
• 💥 BREAKING CHANGE 💥 Upgraded JSON schema generation to 2020-12 version of JSON Schema. (#​1125 by @​jerbly)
• New Experimental feature: weaver registry mcp MCP server for a registry with search, get and live_check tools. (#​1113 by @​jerbly)
• Fix (#​1133) - Live-check: correctly handle --no-stats in report mode. (#​1142 by @​jerbly)
• Feature (#​1132) - Live-check: builtin output rendering for json, jsonl and yaml. (#​1157 by @​jerbly)

Install weaver 0.21.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.21.2/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.21.2/weaver-installer.ps1 | iex"

Download weaver 0.21.2

File	Platform	Checksum
weaver-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
weaver-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
weaver-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
weaver-x86_64-pc-windows-msvc.msi	x64 Windows	checksum
weaver-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.21.1

Compare Source

v0.21.0

Compare Source

v0.20.0: 0.20.0 - 2025-12-11

Compare Source

Release Notes

• Add support for V2 schema in weaver diff (#​1053 by @​jsuereth)
• Add support for V2 schema in JQ helpers (#​1058 by @​lmolkova)
• Add support for V2 schema in weaver_forge (#​980 by @​jsuereth)
• Add support for V2 schema in weaver check (#​1016 by @​jsuereth)
• Add support for V2 schema in emit (#​1019 by @​jerbly)
• Add support for V2 schema in live-check (#​1022 by @​jerbly)
• 💥 BREAKING CHANGE 💥 Violation and Advice have been renamed
  to PolicyFinding. We now use the same structure between all
  rego policies in weaver. (#​1038 by @​jsuereth)
• Add Log support for emit and live-check (#​1042 by @​jerbly)
• Add OTLP log emission for policy findings in live-check. Whenever a PolicyFinding is created, a log_record is emitted to your configured OTLP endpoint. (#​1045 by @​jerbly)
• Deprecate weaver registry search command. This command is not compatible with V2 schema and will be removed in a future version. Users should search the generated documentation instead. (#​1057 by @​jerbly)
• Add support for continuous live-check sessions with --inactivity-timeout=0, --output=none and --no-stats (#​1066 by @​jerbly)

Install weaver 0.20.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.20.0/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.20.0/weaver-installer.ps1 | iex"

Download weaver 0.20.0

File	Platform	Checksum
weaver-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
weaver-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
weaver-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
weaver-x86_64-pc-windows-msvc.msi	x64 Windows	checksum
weaver-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.