Skip to content

chore(lambda): add ADOT Lambda layer v0.48.0 ARNs (CVE remediation) - #38565

Open
priyankaDhingra wants to merge 4 commits into
aws:mainfrom
priyankaDhingra:update-adot-layer-arns-v0.48.0
Open

chore(lambda): add ADOT Lambda layer v0.48.0 ARNs (CVE remediation)#38565
priyankaDhingra wants to merge 4 commits into
aws:mainfrom
priyankaDhingra:update-adot-layer-arns-v0.48.0

Conversation

@priyankaDhingra

@priyankaDhingra priyankaDhingra commented Aug 13, 2026

Copy link
Copy Markdown

Issue

N/A — Data-only update adding new ADOT Lambda layer ARN versions. No new APIs or behavioral changes.

Reason for this change

ADOT Lambda layers v0.48.0 (OTel Collector v0.151.0, Go 1.26.2) have been released to address 27 CVEs including 2 critical. The CDK fact table and version constants need to be updated so customers using LATEST get the new patched layers.

Description of changes

  • fact-tables.ts: Added new ARN entries for all 16 regions × 2 architectures × 5 layer types
  • adot-layers.ts: Added new version constants (V1_32_0_2, V1_30_2, V1_32_0, V0_151_0) and updated LATEST pointers
  • adot.test.ts + function.test.ts: Updated test expectations to match new LATEST ARNs
  • Integration test snapshots: Updated to reflect new LATEST layer versions
  • README.md: Updated version note

Description of how you validated changes

Checklist


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

Add new ADOT Lambda layer versions for the v0.48.0 CVE remediation release:
- Java SDK (wrapper): v1.32.0-2 (layer version :7)
- Java Auto-Instrumentation (agent): v1.32.0-2 (layer version :7)
- JavaScript SDK: v1.30.2 (layer version :2)
- Python SDK: v1.32.0 (layer version :3)
- Generic (collector): v0.151.0 (layer version :1)

All layers now ship ADOT Collector v0.48.0 (OTel Collector v0.151.0,
Go 1.26.2) addressing 27 CVEs including 2 critical.

Update LATEST to point to the new versions for each layer type.
@github-actions github-actions Bot added beginning-contributor [Pilot] contributed between 0-2 PRs to the CDK p2 labels Aug 13, 2026
@aws-cdk-automation
aws-cdk-automation requested a review from a team August 13, 2026 17:34
@github-actions

github-actions Bot commented Aug 13, 2026

Copy link
Copy Markdown
Contributor

👋 It looks like your PR description references an issue, but not in the expected location.

The issue number must appear in the first section of the description (the first two lines), following the template format:

### Issue # (if applicable)

Closes #123.

Please move your issue reference to the top of the description.

@aws-cdk-automation aws-cdk-automation left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

(This review is outdated)

Update unit tests and integration test snapshots to match new
ADOT Lambda layer LATEST versions:
- Java SDK/Agent: ver-1-32-0:7
- Python SDK: ver-1-32-0:3
- JavaScript SDK: ver-1-30-2:2
- Generic (collector): ver-0-151-0:1
@priyankaDhingra

Copy link
Copy Markdown
Author

Exemption Request

This PR is a data-only update adding new ADOT Lambda layer ARN versions to the existing fact table and updating LATEST version constants. It does not introduce new APIs, features, or behavioral changes.

Why README change is not applicable: No new constructs, properties, or APIs are added. The existing ADOT layer documentation in the README already describes how to use these layers — only the version numbers changed internally. The user-facing API (AdotLambdaLayerJavaSdkVersion.LATEST) is unchanged.

Why integration test snapshot is included: The integration test snapshots ARE included in this PR (files under integ.lambda-adot.js.snapshot/). The snapshots were updated to reflect the new LATEST ARNs. The integration test source file (integ.lambda-adot.ts) does not need changes because it uses LATEST which automatically resolves to the new versions.

Previous similar PRs: #32783, #27849, #24573 — all follow the same pattern of updating fact tables + adot-layers.ts + test expectations + snapshots.

@aws-cdk-automation aws-cdk-automation added the pr-linter/exemption-requested The contributor has requested an exemption to the PR Linter feedback. label Aug 13, 2026
@aws-cdk-automation
aws-cdk-automation dismissed their stale review August 13, 2026 18:28

✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.

@priyankaDhingra priyankaDhingra changed the title feat(lambda): add ADOT Lambda layer v0.48.0 ARNs (CVE remediation) chore(lambda): add ADOT Lambda layer v0.48.0 ARNs (CVE remediation) Aug 13, 2026
@priyankaDhingra

Copy link
Copy Markdown
Author

Hi @aws/aws-cdk-maintainers / @aws/aws-cdk-owners can someone help reveiw/merge this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

beginning-contributor [Pilot] contributed between 0-2 PRs to the CDK p2 pr-linter/exemption-requested The contributor has requested an exemption to the PR Linter feedback.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants