chore(lambda): add ADOT Lambda layer v0.48.0 ARNs (CVE remediation) - #38565
chore(lambda): add ADOT Lambda layer v0.48.0 ARNs (CVE remediation)#38565priyankaDhingra wants to merge 4 commits into
Conversation
Add new ADOT Lambda layer versions for the v0.48.0 CVE remediation release: - Java SDK (wrapper): v1.32.0-2 (layer version :7) - Java Auto-Instrumentation (agent): v1.32.0-2 (layer version :7) - JavaScript SDK: v1.30.2 (layer version :2) - Python SDK: v1.32.0 (layer version :3) - Generic (collector): v0.151.0 (layer version :1) All layers now ship ADOT Collector v0.48.0 (OTel Collector v0.151.0, Go 1.26.2) addressing 27 CVEs including 2 critical. Update LATEST to point to the new versions for each layer type.
|
👋 It looks like your PR description references an issue, but not in the expected location. The issue number must appear in the first section of the description (the first two lines), following the template format: Please move your issue reference to the top of the description. |
Update unit tests and integration test snapshots to match new ADOT Lambda layer LATEST versions: - Java SDK/Agent: ver-1-32-0:7 - Python SDK: ver-1-32-0:3 - JavaScript SDK: ver-1-30-2:2 - Generic (collector): ver-0-151-0:1
|
Exemption Request This PR is a data-only update adding new ADOT Lambda layer ARN versions to the existing fact table and updating LATEST version constants. It does not introduce new APIs, features, or behavioral changes. Why README change is not applicable: No new constructs, properties, or APIs are added. The existing ADOT layer documentation in the README already describes how to use these layers — only the version numbers changed internally. The user-facing API ( Why integration test snapshot is included: The integration test snapshots ARE included in this PR (files under Previous similar PRs: #32783, #27849, #24573 — all follow the same pattern of updating fact tables + adot-layers.ts + test expectations + snapshots. |
✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.
|
Hi @aws/aws-cdk-maintainers / @aws/aws-cdk-owners can someone help reveiw/merge this PR. |
Issue
N/A — Data-only update adding new ADOT Lambda layer ARN versions. No new APIs or behavioral changes.
Reason for this change
ADOT Lambda layers v0.48.0 (OTel Collector v0.151.0, Go 1.26.2) have been released to address 27 CVEs including 2 critical. The CDK fact table and version constants need to be updated so customers using
LATESTget the new patched layers.Description of changes
fact-tables.ts: Added new ARN entries for all 16 regions × 2 architectures × 5 layer typesadot-layers.ts: Added new version constants (V1_32_0_2,V1_30_2,V1_32_0,V0_151_0) and updatedLATESTpointersadot.test.ts+function.test.ts: Updated test expectations to match new LATEST ARNsREADME.md: Updated version noteDescription of how you validated changes
Checklist
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license