Skip to content

disable lagacy overrides - #9

Closed
electron0zero wants to merge 86 commits into
mainfrom
disable_lagacy_overrides
Closed

disable lagacy overrides#9
electron0zero wants to merge 86 commits into
mainfrom
disable_lagacy_overrides

Conversation

@electron0zero

Copy link
Copy Markdown
Owner
renovate-sh-app Bot and others added 30 commits March 8, 2026 14:23
| datasource | package           | from    | to      |
| ---------- | ----------------- | ------- | ------- |
| go         | golang.org/x/sync | v0.19.0 | v0.20.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
| datasource | package           | from    | to      |
| ---------- | ----------------- | ------- | ------- |
| go         | golang.org/x/time | v0.14.0 | v0.15.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
…a#6631)

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
* [jsonnet] fix live-store arguments to allow extension

* Compile jsonnet

---------

Co-authored-by: Zach Leslie <xaque208@gmail.com>
| datasource | package                                                 | from     | to       |
| ---------- | ------------------------------------------------------- | -------- | -------- |
| go         | go.opentelemetry.io/collector/client                    | v1.52.0  | v1.53.0  |
| go         | go.opentelemetry.io/collector/component                 | v1.52.0  | v1.53.0  |
| go         | go.opentelemetry.io/collector/component/componenttest   | v0.146.1 | v0.147.0 |
| go         | go.opentelemetry.io/collector/config/configgrpc         | v0.146.1 | v0.147.0 |
| go         | go.opentelemetry.io/collector/config/confighttp         | v0.146.1 | v0.147.0 |
| go         | go.opentelemetry.io/collector/config/configopaque       | v1.52.0  | v1.53.0  |
| go         | go.opentelemetry.io/collector/config/configoptional     | v1.52.0  | v1.53.0  |
| go         | go.opentelemetry.io/collector/config/configtls          | v1.52.0  | v1.53.0  |
| go         | go.opentelemetry.io/collector/confmap                   | v1.52.0  | v1.53.0  |
| go         | go.opentelemetry.io/collector/consumer                  | v1.52.0  | v1.53.0  |
| go         | go.opentelemetry.io/collector/exporter                  | v1.52.0  | v1.53.0  |
| go         | go.opentelemetry.io/collector/exporter/exporterhelper   | v0.146.1 | v0.147.0 |
| go         | go.opentelemetry.io/collector/exporter/exportertest     | v0.146.1 | v0.147.0 |
| go         | go.opentelemetry.io/collector/exporter/otlpexporter     | v0.146.1 | v0.147.0 |
| go         | go.opentelemetry.io/collector/exporter/otlphttpexporter | v0.146.1 | v0.147.0 |
| go         | go.opentelemetry.io/collector/otelcol                   | v0.146.1 | v0.147.0 |
| go         | go.opentelemetry.io/collector/pdata                     | v1.52.0  | v1.53.0  |
| go         | go.opentelemetry.io/collector/pdata/testdata            | v0.146.1 | v0.147.0 |
| go         | go.opentelemetry.io/collector/processor                 | v1.52.0  | v1.53.0  |
| go         | go.opentelemetry.io/collector/receiver                  | v1.52.0  | v1.53.0  |
| go         | go.opentelemetry.io/collector/receiver/otlpreceiver     | v0.146.1 | v0.147.0 |
| go         | go.opentelemetry.io/collector/service                   | v0.146.1 | v0.147.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
* fix(traceql): err on division by zero

Right now, Tempo will panic in the request goroutine if we use a query
like `{ 1 / 0 = 1 }`. Instead, an error should be returned such that the
query simply cannot return any results.

* fix: trim changes

* docs: add to changelog

* chore: reorder to last
Add traceID field to all query-frontend response log lines, enabling
easy navigation from logs to traces for debugging. This covers search,
query range, query instant, trace by ID, tags and tag values handlers.

The trace ID is extracted from the request context using the existing
tracing.ExtractTraceID utility, consistent with handler.go.
| datasource | package                                                                             | from     | to       |
| ---------- | ----------------------------------------------------------------------------------- | -------- | -------- |
| go         | github.com/open-telemetry/opentelemetry-collector-contrib/exporter/zipkinexporter   | v0.146.0 | v0.147.0 |
| go         | github.com/open-telemetry/opentelemetry-collector-contrib/pkg/ottl                  | v0.146.0 | v0.147.0 |
| go         | github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger     | v0.146.0 | v0.147.0 |
| go         | github.com/open-telemetry/opentelemetry-collector-contrib/processor/filterprocessor | v0.146.0 | v0.147.0 |
| go         | github.com/open-telemetry/opentelemetry-collector-contrib/receiver/jaegerreceiver   | v0.146.0 | v0.147.0 |
| go         | github.com/open-telemetry/opentelemetry-collector-contrib/receiver/kafkareceiver    | v0.146.0 | v0.147.0 |
| go         | github.com/open-telemetry/opentelemetry-collector-contrib/receiver/zipkinreceiver   | v0.146.0 | v0.147.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
| datasource | package                                                         | from    | to      |
| ---------- | --------------------------------------------------------------- | ------- | ------- |
| go         | go.opentelemetry.io/otel                                        | v1.40.0 | v1.41.0 |
| go         | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.40.0 | v1.41.0 |
| go         | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp | v1.40.0 | v1.41.0 |
| go         | go.opentelemetry.io/otel/metric                                 | v1.40.0 | v1.41.0 |
| go         | go.opentelemetry.io/otel/sdk                                    | v1.40.0 | v1.41.0 |
| go         | go.opentelemetry.io/otel/trace                                  | v1.40.0 | v1.41.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
….0 (grafana#6639)

| datasource | package                      | from    | to      |
| ---------- | ---------------------------- | ------- | ------- |
| docker     | otel/opentelemetry-collector | 0.146.1 | 0.147.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
| datasource | package                                                                     | from    | to      |
| ---------- | --------------------------------------------------------------------------- | ------- | ------- |
| go         | go.opentelemetry.io/contrib/exporters/autoexport                            | v0.65.0 | v0.66.0 |
| go         | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | v0.65.0 | v0.66.0 |
| go         | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp               | v0.65.0 | v0.66.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
* feat: add -health flag for Docker healthchecks

Add a -health CLI flag that checks Tempo's /ready endpoint without
requiring a shell in the container. This enables
native Docker HEALTHCHECK using the Tempo binary itself, which is
important since the distroless base image has no shell or curl.

Usage: tempo -health [-health.url=http://localhost:3200/ready]

Follows the same pattern adopted in Loki (grafana/loki#20590).

* refactor: use standard flag package for health check
* Fix dedicated column filtering in vp4

* Fix dedicated column filtering in vp3

* Fix dedicated column filtering in vp5

* CHANGELOG.md
…a#6649)

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
…na#6648)

* jsonnet: Add emptyDir data volume to block-builder StatefulSet

* chlog
…a#6651)

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
…fana#6652)

| datasource | package                      | from    | to      |
| ---------- | ---------------------------- | ------- | ------- |
| go         | github.com/minio/minio-go/v7 | v7.0.98 | v7.0.99 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
…ock_builder and live_store (grafana#6647)

* Block config always taken from storage.trace.block

* Fall back to dedicated columns from config if not set in overrides
…ana#6655)

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
…a#6663)

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
…rafana#6664)

| datasource | package                           | from   | to     |
| ---------- | --------------------------------- | ------ | ------ |
| go         | github.com/olekukonko/tablewriter | v1.1.3 | v1.1.4 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
)

* fix: skip per-label limiter and sanitizer for target_info and host_info metrics

The PerLabelLimiter was tracking cardinality for ALL labels that passed
through it, including resource attributes from target_info and host_info.

This caused the demand estimate metric to report way more label names instead
of just the configured dimensions from span-metrics and service-graphs.

info metrics carry all resource attributes as labels and have
high cardinality by design so we should not limit and sanitize info metrics.

Made chanegs to skip the span name drain sanitizer for these metrics as well.

* rename NewLabelBuilderWithoutLimiter -> NewInfoMetricLabelBuilder

* test: verify info metric labels are excluded from demand estimate

Add TestManagedRegistry_InfoMetricLabelsNotInDemandEstimate that pushes
data through both NewLabelBuilder (span-metrics) and NewInfoMetricLabelBuilder
(target_info, host_info), then asserts only span-metrics labels appear in
the tempo_metrics_generator_registry_label_cardinality_demand_estimate metric.

* Update CHANGELOG.md
grafana#6653)

* generator: fix drain old series on metric replacement to prevent limiter leak

When a processor config change (dimensions, histogram buckets, etc.)
triggers processor recreation, old metrics are replaced in the registry
via registerMetric. Previously, the old metric's series were silently
garbage-collected without calling OnDelete on the limiter, permanently
inflating LocalSeriesLimiter.activeSeries. Each replacement accumulated
more leaked counts, eventually pushing activeSeries above maxActiveSeries
and trapping the tenant in permanent overflow.

Drain all old series through removeStaleSeries before replacing the
metric, which properly calls OnDelete for each series and decrements
the limiter's counter.

* fix lint: rename unused onAddFunc parameter to _

* remove unnecessary logging change, keep original log line

* use math.MaxInt64 instead of time.Now().Add(time.Hour) for drain timestamp
javiermolinar and others added 27 commits March 17, 2026 12:19
* distributor: remove ingester write path

* docs: remove stale distributor ingester config

* mixin: remove stale distributor ingester panel

* app: remove ingester module wiring

* cmd: remove remaining app ingester config

* docs(changelog): add entry for grafana#6667

* manifest

* refactor: remove leftover distributor ingester references

* chore: remove remaining ingester example references

* add warning check

* Remove duplicate changelog entry

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* fix changelog

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
* Agents and skill for writing Tempo docs

* Rename agent file

* Consolidate prompts and skills

* Add evals and skill improvements from iteration 1

- Add evals/evals.json to docs-pr-check and docs-pr-write skills with
  standalone and workflow test cases
- Add integration eval covering the Phase 1.5 → 1.75 handoff
- Add evals-workspace/iteration-1 with outputs, grading, and benchmark
  from the first eval run
- Tighten docs-pr-check classification boundary: any actionable gap
  now requires 'Docs update needed', not 'Docs present'
- Strengthen docs-pr-write example requirement to 'runnable example'
  and make version callouts required rather than optional

Made-with: Cursor

* Tighten skills and generalize eval test cases

- Scope codebase verification in docs-pr-write to grafana/tempo only,
  guided by PR changed files (Go, proto, Helm/YAML)
- Add Step 8: targeted verification handoff to user at end of task
- Remove verification-checklist.md from docs-pr-check reference;
  restore it in docs-pr-write as a selective source for Step 8
- Mark best-practices.md and verification-checklist.md as human-writer
  reference only (not agent task lists)
- Replace hardcoded PR numbers in all evals with pr_type,
  pr_selection_command, and prompt_template fields
- Rewrite assertions to test skill behavior, not PR-specific content
- Add pre-flight PR selection section to evals README

Made-with: Cursor

* Add evals-workspace to .gitignore

Made-with: Cursor

* Remove evals-workspace from tracking and fix .gitignore path

Made-with: Cursor

* Revert .gitignore changes — keep evals-workspace exclusion local only

Made-with: Cursor

* Remove .cursor/rules AI toolkit files to reduce prompt cost

Drop DOCS.md, toolkit.instructions.md, and release-notes.md.
Use lighter-weight .agents/doc-agents/shared and .claude/skills instead.

Made-with: Cursor
…rafana#6705)

| datasource | package                        | from   | to      |
| ---------- | ------------------------------ | ------ | ------- |
| go         | go.opentelemetry.io/proto/otlp | v1.9.0 | v1.10.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
| datasource | package       | from    | to      |
| ---------- | ------------- | ------- | ------- |
| docker     | grafana/alloy | v1.13.2 | v1.14.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
…fana#6711)

* fix(s3): treat SSE-C encryption_key as a secret to prevent plaintext exposure (CVE-2026-28377)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* chore: update changelog with PR number and author

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* test(s3): assert SSE-C encryption_key is redacted in YAML output

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* fix(s3): gofmt config.go and move SSE redaction test to config_test.go

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* fix(s3): address review feedback - local var for key, yaml.v3 in test, changelog grammar

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
…a#6715)

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
….11.3 (grafana#6716)

| datasource | package                              | from    | to      |
| ---------- | ------------------------------------ | ------- | ------- |
| go         | github.com/golangci/golangci-lint/v2 | v2.11.2 | v2.11.3 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
* chore: add v2.10.3 to CHANGELOG

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* chore: remove spurious v2.10.3 section from changelog

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* chore: move v2.10.3 changelog entry above v2.10.2

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
…ana#6720)

| datasource | package                     | from    | to      |
| ---------- | --------------------------- | ------- | ------- |
| go         | cloud.google.com/go/storage | v1.60.0 | v1.61.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
…rafana#6721)

| datasource | package                         | from    | to      |
| ---------- | ------------------------------- | ------- | ------- |
| go         | github.com/googleapis/gax-go/v2 | v2.17.0 | v2.18.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
…rafana#6723)

| datasource | package                | from                         | to                           |
| ---------- | ---------------------- | ---------------------------- | ---------------------------- |
| docker     | grafana/tempo-ci-tools | main-3f38ee8-20260314-232609 | main-4825779-20260317-172428 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
)

| datasource | package               | from     | to       |
| ---------- | --------------------- | -------- | -------- |
| go         | google.golang.org/api | v0.270.0 | v0.271.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
…wn (grafana#6693)

* Move setting of the flag to live store starting

* Changelog update

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
* chore: Fixing Renovate errors

* Apply suggestions from code review

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
…ana#6726)

| datasource | package                     | from    | to      |
| ---------- | --------------------------- | ------- | ------- |
| go         | cloud.google.com/go/storage | v1.61.0 | v1.61.1 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
…fana#6727)

| datasource  | package                         | from   | to     |
| ----------- | ------------------------------- | ------ | ------ |
| github-tags | actions/create-github-app-token | v2.2.1 | v3.0.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
* fix: preserve metrics-generator transition target behavior

* docs(changelog): add entry for grafana#6707

* docs(changelog): reclassify grafana#6707 as change

* formatting

* fix review

* manifest

* Update CHANGELOG with recent changes and deprecations
Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
| datasource | package          | from    | to      |
| ---------- | ---------------- | ------- | ------- |
| go         | golang.org/x/net | v0.51.0 | v0.52.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
…grafana#6732)

| datasource | package                | from    | to      |
| ---------- | ---------------------- | ------- | ------- |
| go         | google.golang.org/grpc | v1.79.2 | v1.79.3 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
| datasource | package            | from    | to      |
| ---------- | ------------------ | ------- | ------- |
| go         | golang.org/x/tools | v0.42.0 | v0.43.0 |

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Legacy (flat, unscoped) overrides are now disabled by default. Tempo will
refuse to start if legacy overrides are detected unless the user sets
enable_legacy_overrides: true (or -config.enable-legacy-overrides=true).
A deprecation warning is logged when legacy overrides are enabled.

The tempo-cli migrate-overrides-config command force-enables legacy
overrides since its purpose is to convert them to the new format.
Migrate the super_user per-tenant overrides in the jsonnet microservices
config from the flat legacy format to the new scoped format with
ingestion and global sections. Regenerate compiled configs.
@electron0zero
electron0zero deleted the disable_lagacy_overrides branch March 19, 2026 11:11
@electron0zero
electron0zero restored the disable_lagacy_overrides branch March 19, 2026 11:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet