opentelemetry-python-contrib

opentelemetry-python-contrib copied to clipboard

feat(flask,wsgi): Add exemplars to metrics

3

# Description Close the request span after publishing the metrics to allow exemplar generation. Fixes #2158 ## Type of change - New feature (non-breaking change which adds functionality) # How...

AlexisBRENON

Support for kafka-python-ng

1

Project has renamed and rehomed to https://github.com/wbarnha/kafka-python-ng; it would be nice to support this version also at https://github.com/open-telemetry/opentelemetry-python-contrib/blob/fdb2e141d4455a367f9e5fb1971a950c6a59178a/instrumentation/opentelemetry-instrumentation-kafka-python/src/opentelemetry/instrumentation/kafka/package.py#L16

mzealey

Encode OSS httpx

naga2222

Upgrade starlette to fix [4 Dependabot alerts](https://github.com/Fidelity-External-Staging/open-telemetry-opentelemetry-python-contrib/security/dependabot?q=is%3Aopen+package%3Astarlette+manifest%3Ainstrumentation%2Fopentelemetry-instrumentation-starlette%2Ftest-requirements.txt+has%3Apatch) in [instrumentation/opentelemetry-instrumentation-starlette/test-requirements.txt](https://github.com/Fidelity-External-Staging/open-telemetry-opentelemetry-python-contrib/blob/-/instrumentation/opentelemetry-instrumentation-starlette/test-requirements.txt) Upgrade starlette to version 0.36.2 or later. For example: starlette>=0.36.2

SwathiEnugula202

Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning #24

1

Upgrade werkzeug to fix [3 Dependabot alerts](https://github.com/Fidelity-External-Staging/open-telemetry-opentelemetry-python-contrib/security/dependabot?q=is%3Aopen+package%3Awerkzeug+manifest%3Ainstrumentation%2Fopentelemetry-instrumentation-pyramid%2Ftest-requirements.txt+has%3Apatch) in [instrumentation/opentelemetry-instrumentation-pyramid/test-requirements.txt](https://github.com/Fidelity-External-Staging/open-telemetry-opentelemetry-python-contrib/blob/-/instrumentation/opentelemetry-instrumentation-pyramid/test-requirements.txt) Upgrade werkzeug to version 2.3.8 or later. For example: werkzeug>=2.3.8

SwathiEnugula202

When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by a proxy to other clients. If the...

stubati202449

SQLAlchemy is vulnerable to SQL Injection via group_by paramete

1

Upgrade SQLAlchemy to fix [2 Dependabot alerts](https://github.com/Fidelity-External-Staging/open-telemetry-opentelemetry-python-contrib/security/dependabot?q=is%3Aopen+package%3ASQLAlchemy+manifest%3Ainstrumentation%2Fopentelemetry-instrumentation-sqlalchemy%2Ftest-requirements-0.txt+has%3Apatch) in [instrumentation/opentelemetry-instrumentation-sqlalchemy/test-requirements-0.txt](https://github.com/Fidelity-External-Staging/open-telemetry-opentelemetry-python-contrib/blob/-/instrumentation/opentelemetry-instrumentation-sqlalchemy/test-requirements-0.txt) Upgrade SQLAlchemy to version 1.3.0 or later. For example: SQLAlchemy>=1.3.0

ratmore

Jinja2 templating with autoescape=False

1

Cross-site scripting (XSS) attacks can occur if untrusted input is not escaped. This applies to templates as well as code. The jinja2 templates may be vulnerable to XSS if the...

rama280290

Auto instrumentation issues in Python 3.12

1

Before opening a feature request against this repo, consider whether the feature should/could be implemented in the [other OpenTelemetry client libraries](https://github.com/open-telemetry/). If so, please [open an issue on opentelemetry-specification](https://github.com/open-telemetry/opentelemetry-specification/issues/new) first....

bourbonkk

FastAPI `uninstrument` disallows adding more middlewares with `fastapi@>=0.91` and `starlette@>=0.24`

2

Uninstrument is breaking subsequent calls to `add_middleware` due to recent changes in `starlette` https://github.com/encode/starlette/pull/2017 and latest version of `fastapi@>=0.91`. [Call to `build_middleware_stack`](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/4f6618324d02e663ddcc24fe68d5241ca1620a48/instrumentation/opentelemetry-instrumentation-fastapi/src/opentelemetry/instrumentation/fastapi/__init__.py#L257) makes an instance of FastAPI and [starelette to...

maxkomarychev