Skip to content

opentelemetry-collector

v0.154.0 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 1mo Tracing
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

prometheus monitoring observability opentelemetry telemetry

Affected surfaces

crypto_tls

ReleasePort's take

Light signal
editorial:auto 1mo

In v0.154.0 the `--skip-get-modules` flag in `cmd/builder` no longer regenerates go.mod, altering module handling behavior.

Why it matters: Affects projects using `--skip-get-modules`; if build pipelines rely on automatic go.mod regeneration they must adjust their workflows to manually manage dependency updates.

Summary

AI summary

Updates 💡 Enhancements 💡, 🧰 Bug fixes 🧰, and 🛑 Breaking changes 🛑 across a mixed release.

Changes in this release

Breaking High

`cmd/builder`: `--skip-get-modules` no longer regenerates go.mod file.

`cmd/builder`: `--skip-get-modules` no longer regenerates go.mod file.

Source: llm_adapter@2026-06-09

Confidence: high

 —
Feature Medium

`pkg/config/configtls`: adds `include_insecure_cipher_suites` to enable insecure cipher suites (disabled by default).

`pkg/config/configtls`: adds `include_insecure_cipher_suites` to enable insecure cipher suites (disabled by default).

Source: llm_adapter@2026-06-09

Confidence: high

 —
Feature Medium

`pkg/confighttp`: adds `ExposedHeaders` field to `CORSConfig` for Access‑Control‑Expose‑Headers header.

`pkg/confighttp`: adds `ExposedHeaders` field to `CORSConfig` for Access‑Control‑Expose‑Headers header.

Source: llm_adapter@2026-06-09

Confidence: high

 —
Feature Medium

`cmd/mdatagen`: handles numeric validators (minimum, maximum, exclusiveMinimum, exclusiveMaximum) in generated config structs.

`cmd/mdatagen`: handles numeric validators (minimum, maximum, exclusiveMinimum, exclusiveMaximum) in generated config structs.

Source: llm_adapter@2026-06-09

Confidence: high

 —
Bugfix Medium

`pkg/exporterhelper`: fixes nil‑pointer panic in `sending_queue::batch` Unmarshal when sizer is set but batch disabled.

`pkg/exporterhelper`: fixes nil‑pointer panic in `sending_queue::batch` Unmarshal when sizer is set but batch disabled.

Source: llm_adapter@2026-06-09

Confidence: high

 —
Bugfix Low

`cmd/mdatagen`: removes extra line in README.md between status and description.

`cmd/mdatagen`: removes extra line in README.md between status and description.

Source: llm_adapter@2026-06-09

Confidence: high

 —
Full changelog

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.154.0

End User Changelog

🛑 Breaking changes 🛑

  • cmd/builder: The --skip-get-modules flag will no longer regenerate your go.mod file. (#15390)
    This is mostly a bug fix, as it led to adverse behaviour that was unintended in the described flow in the README.
    Now when you run --skip-get-modules, your go.mod file will truly be untouched by ocb as the info log claims.

💡 Enhancements 💡

  • pkg/config/configtls: Add include_insecure_cipher_suites to configtls to enable insecure cipher suites. Insecure cipher suites are disabled by default for security. (#13829)
  • pkg/confighttp: Add ExposedHeaders field to CORSConfig to allow setting the Access-Control-Expose-Headers response header. (#15119)

🧰 Bug fixes 🧰

  • cmd/mdatagen: Removes the extra line in the README.md between status and description (#15306)
  • pkg/exporterhelper: Fix nil-pointer panic in sending_queue::batch Unmarshal when sending_queue::sizer is set and sending_queue::batch::enabled is false. (#14687)
    When sending_queue::sizer was set and sending_queue::batch::enabled: false
    cleared the batch Optional to None, the sizer-inheritance branch in
    queuebatch.Config.Unmarshal dereferenced a nil Optional and crashed the
    collector at startup. The branch now also requires Batch.HasValue().

API Changelog

💡 Enhancements 💡

  • cmd/mdatagen: Handle numeric validators in generated config structs (#14806)
    Supported validators include minimum, maximum, exclusiveMinimum and exclusiveMaximum.
  • pkg/config/configtls: Add include_insecure_cipher_suites to configtls to enable insecure cipher suites. Insecure cipher suites are disabled by default for security. (#13829)
  • pkg/confighttp: Add ExposedHeaders field to CORSConfig to allow setting the Access-Control-Expose-Headers response header. (#15119)

Breaking Changes

  • `cmd/builder`: The `--skip-get-modules` flag will no longer regenerate your `go.mod` file.
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track opentelemetry-collector

Get notified when new releases ship.

Sign up free

About opentelemetry-collector

OpenTelemetry Collector

All releases →

Related context

Related tools

Earlier breaking changes

  • v0.153.0 Enable reaggregation config generation by default in mdatagen; set `reaggregation_enabled: false` to retain previous behavior.
  • v0.153.0 Stabilize pdata.enableRefCounting feature gate.
  • v0.153.0 Stabilize telemetry.UseLocalHostAsDefaultMetricsAddress gate.
  • v0.153.0 Remove pdata.useCustomProtoEncoding feature gate.
  • v0.153.0 Stabilize otelcol.printInitialConfig gate.

Beta — feedback welcome: [email protected]