Skip to content

merge queue: merged #22381: [9.6] (backport #22375) bump apm-data to v1.23.0 - #22387

Closed
mergify[bot] wants to merge 3 commits into
9.6from
mergify/merge-queue/e972669fbe
Closed

merge queue: merged #22381: [9.6] (backport #22375) bump apm-data to v1.23.0#22387
mergify[bot] wants to merge 3 commits into
9.6from
mergify/merge-queue/e972669fbe

Conversation

@mergify

@mergify mergify Bot commented Nov 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This is a merge queue draft opened by Mergify. Its pull request has merged, and nobody needs to act on it.
Mergify opened it for batch proud-potaufeu-at2v0v of the default queue, to test #22381 before it merged into 9.6.

🎉 What landed

Mergify merged its pull request into 9.6, then closed this draft:

This draft's code was built in this order:

  1. 9.6 at 3601fe8
  2. #22381, the pull request of this batch
Metadata for CI tooling, read by mergify ci 
---
all_scopes: false
checking_base_sha: 3601fe8b561fe50860b061dfcbaf2288d50c941a
previous_check_retries: []
previous_failed_batches: []
pull_requests:
  - number: 22381
    scopes: []
scopes: []
...
Required conditions of queue rule default for merge
Required conditions to stay in the queue

aelnahas and others added 3 commits November 5, 2026 16:12
@aelnahas @mergify
bump apm-data to v1.23.0 (#22375)
6d13b80 
* bump apm-data to v1.23.0

* update NOTICE.txt and NOTICE-fips.txt for apm-data v1.23.0 bump

* fix ci lint and NOTICE-fips.txt

(cherry picked from commit 378a4a7)

# Conflicts:
#	go.mod
@aelnahas
Potential fix for pull request finding 'Resolve go.mod merge conflict…
4337cb0 
… to restore Go module loading'

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
@mergify @mergify-commit-signer
Merge of #22381
921e247
@github-actions

github-actions Bot commented Nov 5, 2026

Copy link
Copy Markdown
Contributor

🤖 GitHub comments

Just comment with:

  • run docs-build : Re-trigger the docs validation. (use unformatted text in the comment!)

@mergify mergify Bot mentioned this pull request Nov 5, 2026
Merged
2 tasks
@elastic-vault-github-plugin-prod

elastic-vault-github-plugin-prod Bot commented Nov 5, 2026

Copy link
Copy Markdown
Contributor

Dependency Update Analysis

Summary: This PR bumps Go dependencies github.com/elastic/apm-data (v1.22.2 → v1.23.0) and transitive github.com/elastic/opentelemetry-lib (v0.39.0 → v0.49.0); based on release notes and repository usage, overall risk is low.

Dependency 1: github.com/elastic/apm-data v1.22.2 → v1.23.0

Ecosystem: Go

Check Result
Breaking changes ✅ None found in consumed interfaces
Testable in PR ✅ Yes — .github/workflows/ci.yml runs on pull_request and merge_group
Changelog highlights (v1.22.2 → v1.23.0)
  • Added semconv v1.33.0 support.
  • Internal dependency updates, including github.com/elastic/opentelemetry-lib (0.39.0 → 0.49.0) and OTel/grpc/protobuf-related bumps.
  • No CVE/GHSA/security-fix entries were called out in upstream release notes.
Usage in this repository

Used broadly in runtime ingestion/processing paths via:

  • github.com/elastic/apm-data/input, input/elasticapm, input/otlp
  • github.com/elastic/apm-data/model/modelpb, model/modeljson, model/modelprocessor

Representative files: internal/beater/api/intake/handler.go, internal/beater/otlp/grpc.go, internal/publish/pub.go, x-pack/apm-server/main.go, x-pack/apm-server/sampling/eventstorage/protobufcodec.go.

Compatibility assessment
  • Version bump is minor (v1.22.2 → v1.23.0) with no Go major import-path change.
  • Current imports/consumed packages remain present; no removed APIs or required config changes identified from upstream notes.
  • Security posture appears unchanged-to-improved (dependency refreshes), with no indicated new attack surface for current usage.

Dependency 2: github.com/elastic/opentelemetry-lib v0.39.0 → v0.49.0

Ecosystem: Go (transitive)

Check Result
Breaking changes ✅ None found for this repo (no direct imports)
Testable in PR ✅ Yes — transitive impact covered by PR CI (pull_request/merge_group)
Changelog highlights (v0.39.0 → v0.49.0)
  • Upstream v0.49.0 notes emphasize dependency maintenance (OTel Collector deps and tooling bumps).
  • No CVE/GHSA/security-fix entries were called out in upstream release notes.
Usage in this repository
  • No direct imports of github.com/elastic/opentelemetry-lib were found in *.go files.
  • Present as an indirect dependency in go.mod, pulled through apm-data.
Compatibility assessment
  • Since usage is transitive-only, compatibility risk depends on apm-data integration and CI/build validation.
  • No direct API surface in this repo to migrate.

Labels Applied

  • oblt-aw/ai/merge-ready — applied because risk is low, no breaking usage impact was identified, and validation workflows run in PR context.

What is this? | From workflow: Observability Agentic Workflow — Pull Request

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.

@mergify mergify Bot changed the title merge queue: checking #22381 on 9.6 (3601fe8) merge queue: merged #22381: [9.6] (backport #22375) bump apm-data to v1.23.0 Nov 5, 2026
@mergify mergify Bot closed this Nov 5, 2026
@mergify
mergify Bot deleted the mergify/merge-queue/e972669fbe branch November 5, 2026 19:51
@infra-vault-gh-plugin-prod

infra-vault-gh-plugin-prod Bot commented Nov 5, 2026

Copy link
Copy Markdown

💚 Build Succeeded

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot will automatically review once the pull request is marked ready for review

Assignees

No one assigned

Labels

oblt-aw/ai/merge-ready

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@aelnahas