[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
duckdb (changelog)	==1.5.5 → ==1.5.6
grpcio	==1.83.0 → ==1.84.0
opentelemetry-exporter-otlp	==1.44.0 → ==1.45.0
opentelemetry-proto	==1.44.0 → ==1.45.0
opentelemetry-sdk	==1.44.0 → ==1.45.0
pandas	==3.0.5 → ==3.0.6
pydantic (changelog)	==2.13.4 → ==2.13.5

---

Release Notes

duckdb/duckdb-python (duckdb)

v1.5.6: Bugfix Release

Compare Source

See DuckDB's changelog for all changes in DuckDB.

grpc/grpc (grpcio)

v1.84.0

Compare Source

This is release 1.84.0 (gimbal) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [promise_based_filter] enable v2_non_owning_waker_implementation experiment. (#​43253)
• [xDS] allow server listener address to match wildcard port. (#​43247)
• [WRR] remove env var guard for custom backend metrics. (#​43198)
• [subchannel] enable connection scaling service config fields. (#​43116)
• [subchannel] add metrics as per A94. (#​43140)
• Fix incorrect hostname suffix matching in no_proxy handling (prevents proxy bypass). (#​41915)

C#

• [C# Grpc.Tools] Add native macOS ARM64 support via universal binaries. (#​41222)

Python

• [Python] Fix -Werror=unused-result error triggered by Cythonized code. (#​43313)
• [Python] Release Python 3.15 wheels publicly. (#​43259)
• [Python][AsyncIO] Fixed reference cycles. (#​43121)
• [Python] fix: remove ghost key in grpc.aio.Metadata.delitem when last value is deleted. (#​42974)
• [Python] Fix the StatusCode Enums to be int. (#​43167)
• [Python] Fixed the parenthesis placement. (#​43111)
• [Python] Removed UsageError exception from registered method. (#​43086)
• [Python] Added registered methods support in AsyncIO stack . (#​41796)
• [Python] AIO Part 4 - Typehints fixes and add Pyright for aio/_channel.py. (#​42736)
• [Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x. (#​43000)
• [Python] Observability plugin fixes. (#​42785)

Ruby

• [Ruby] Fix: Addressed Array of strings passed as metadata. (#​42827)

v1.83.1

Compare Source

This is release gRPC Core 1.83.1 (garden).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

open-telemetry/opentelemetry-python (opentelemetry-exporter-otlp)

v1.45.0: Version 1.45.0/0.66b0

Compare Source

Added

• opentelemetry-exporter-prometheus: add support to configure Resource attributes as metric labels (#​5122)
• infra: add renovate (#​5202)
• opentelemetry-api, opentelemetry-sdk: add support for extended attribute values everywhere. (#​5266)
• opentelemetry-sdk: wire the top-level log_level field in declarative configuration — when set, maps the OTel SeverityNumber value to a Python logging level and applies it to the opentelemetry logger so SDK internal diagnostics respect the configured severity. (#​5351)
• opentelemetry-sdk: add the new stable AlwaysRecordSampler (#​5354)
• opentelemetry-configuration, opentelemetry-sdk: wire top-level attribute_limits into per-signal providers via declarative config; add log_record_limits support to LoggerProvider (#​5365)
• opentelemetry-exporter-otlp-json-http: add OTLP JSON HTTP exporter package (#​5374)
• opentelemetry-api, opentelemetry-sdk: add enabled() support to the Logger API, SDK, and LogRecordProcessor to let instrumentation skip expensive work when logging is disabled (#​5380)
• opentelemetry-exporter-otlp-json-file: add OTLP JSON file Docker tests (#​5412)
• opentelemetry-configuration: wire the experimental tracer_configurator/development, meter_configurator/development and logger_configurator/development fields into create_tracer_provider, create_meter_provider and create_logger_provider, so per-instrumentation-scope enabled overrides declared in the config file are applied to the provider (previously these fields were parsed but silently discarded). The logger minimum_severity/trace_based fields are not supported by the Python SDK and are ignored with a warning. (#​5418)
• docs/examples: add example on how to manually setup the SDK to get SDK metrics (#​5449)
• opentelemetry-docker-tests: add Prometheus exporter docker tests (#​5457)
• opentelemetry-sdk: count records dropped after shutdown on otel.sdk.processor.{span,log}.processed with error.type=already_shutdown (batch span/log and simple log processors), which the semantic conventions define as a valid value for this metric. (#​5509)
• opentelemetry-semantic-conventions: update semantic conventions to v1.44.0 (#​5511)
• opentelemetry-sdk: add host.id to the host resource detector (#​5653)
• opentelemetry-test-utils: add CapturingSampler to record what samplers receive in instrumentation tests (#​5681)

Changed

• Enable PIE (flake8-pie) ruff rule and fix all violations (#​5150)
• The public opentelemetry.util.types.AttributeValue type in package opentelemetry-api is being expanded to include None, heterogeneous sequences of primitive types (and nested sequences) as opposed to only homogeneous primitive sequences, and Mappings of strings to any primitive types or sequences/mappings (which themselves must only contain primitive types or sequences/mappings validated the same way). If a bytes type is set as an attribute value in the SDK, it will no longer be utf-8 decoded to a string, instead it will be passed along as is in accordance with the OTEL spec, since bytes is a valid type in the OTLP proto. (#​5266)
• opentelemetry-exporter-otlp-proto-http: add a max_request_size argument to the OTLP HTTP exporters (traces, logs, metrics); serialized requests larger than the limit are dropped before sending, measured before compression. Defaults to 64 MiB (enabled); set to 0 to disable. Mirrors opentelemetry-go#8157. (#​5369)
• [BREAKING] opentelemetry-api: subclasses of Logger need to implement the enabled method (#​5380)
• opentelemetry-exporter-otlp-proto-http: refactor to use shared opentelemetry-exporter-otlp-common and opentelemetry-exporter-http-transport packages and switch default HTTP backend to urllib3 (#​5389)
• opentelemetry-sdk: unify logging force_flush timeout defaults to 30000ms (#​5438)
• opentelemetry-python: enable Ruff default ruleset and fix auto-fixable lint issues (#​5491)
• opentelemetry-sdk: SimpleSpanProcessor now drops spans ended after shutdown() instead of passing them to the exporter, and counts them on otel.sdk.processor.span.processed with error.type=already_shutdown. (#​5512)
• Bump pytest to 9.0.3 (#​5518)
• opentelemetry-exporter-otlp-proto-http: clarify that the endpoint= kwarg requires the full signal path (#​5633)
• opentelemetry-sdk: fix typos in SpanLimits docstring (#​5658)

Fixed

• opentelemetry-configuration: perform environment variable substitution on scalar values after parsing the configuration file, so ${VAR} references inside comments and mapping keys are no longer substituted and undefined references in comments no longer abort loading (#​5407)
• opentelemetry-configuration: declarative config environment variable substitution now replaces an unset variable that has no default with an empty value instead of raising an error, per the configuration spec. Resource attributes whose value resolves to null (an unset ${VAR} with no default) are skipped with a warning instead of being inserted as a null value. (#​5408)
• 'scripts/build.sh: add opentelemetry-configurationandopentelemetry-proto-json` to the package to release (#​5425)
• opentelemetry-sdk: fix View instrument-name matching so a view configured with an instrument's real (mixed-case) name is applied; matching is now case-insensitive and platform-independent instead of relying on fnmatch's OS-dependent case handling (#​5430)
• opentelemetry-sdk: fix missing f-prefix in exponential histogram error messages (#​5434)
• opentelemetry-configuration: resolve false-positive warning logs for newer schema minor version (#​5436)
• opentelemetry-sdk: make methods on FixedSizeExemplarReservoirABC thread safe (#​5437)
• opentelemetry-propagator-jaeger: fix typing issues and enable pyright typechecking for the package opentelemetry-propagator-jaeger: skip uberctx- baggage headers with an empty value on extraction instead of raising TypeError (#​5440)
• opentelemetry-sdk: fix TypeError when instantiating a _BaseConfigurator subclass whose __init__ takes arguments (#​5441)
• opentelemetry-sdk: fix TypeError in os.fork() when a BatchProcessor or PeriodicExportingMetricReader is garbage collected (#​5453)
• opentelemetry-configuration: a declarative config key present with an empty (null) value on an object-typed node (e.g. always_on:, a - service: detector, or a metric console: exporter) is now treated the same as an explicit empty config (always_on: {}) instead of failing type dispatch or silently skipping the node. Both dict-typed nodes and dataclasses constructible with no arguments are covered. (#​5454)
• opentelemetry-api: fix copy-pasted log message in SpanContext.__delattr__ (#​5455)
• opentelemetry-sdk: reject views with ExponentialBucketHistogramAggregation for asynchronous instruments instead of silently producing no data (#​5461)
• opentelemetry-sdk: fill every bucket of SimpleFixedSizeExemplarReservoir before random sampling (#​5462)
• opentelemetry-sdk: Import code_attributes from stable semconv package (#​5465)
• opentelemetry-sdk: for both the simple and batch span/log processors, count otel.sdk.processor.{span,log}.processed when the processor submits records to the exporter instead of after export completes, and stop stamping exporter failures onto this metric as error.type (#​5472)
• opentelemetry-sdk: fix misleading instrument name validation error message (name max length is 255, not 63). (#​5513)
• opentelemetry-configuration: add missing process executable name to default service name when available in resource attributes (#​5534)
• opentelemetry-sdk: fix values for process.executable.name and process.executable.path to match semantic conventions. (#​5535)
• opentelemetry-api: fix TraceState.update dropping all entries when adding a new key at the 32-key limit (#​5543)
• opentelemetry-sdk: bound get_aggregated_resources() wait to the timeout (#​5545)
• opentelemetry-sdk: don't read process.executable.name resource attribute when building default service.name (#​5547)
• opentelemetry-propagator-jaeger: enforce baggage limits on both uberctx- extract and inject, borrowing the same limits (180 entries, 4096 bytes per entry, 8192 bytes total) the package's core W3CBaggagePropagator already uses, so neither an inbound carrier nor an in-process baggage map can produce unbounded work or headers. (#​5556)
• opentelemetry-sdk: keep metric attribute values that Python considers equal but the data model does not, such as True, 1 and 1.0, in separate metric streams (#​5573)
• opentelemetry-sdk: keep Resource hashable and serialisable when an attribute value is bytes, instead of raising TypeError from every OTLP encoder (#​5577)
• opentelemetry-sdk: fix instrumentation scope name matching in the tracer, meter and logger configurators so it is case-sensitive on every platform instead of relying on fnmatch's OS-dependent case handling (#​5584)
• opentelemetry-sdk: fix TracerProvider() raising ValueError when OTEL_TRACES_SAMPLER_ARG is a syntactically valid number outside the [0.0, 1.0] range, instead of logging a warning and falling back like other invalid values (#​5594)
• opentelemetry-sdk: retain values from synchronous instruments using last-value aggregation across cumulative collections (#​5637)
• opentelemetry-api: Added guard for negative value on max_value_len (#​5647)
• opentelemetry-sdk: fix overriding of the service.instance.id which has been populated from the user provided values through the resource detectors (#​5660)
• opentelemetry-exporter-otlp-proto-grpc: Fix incorrect default port for OTLP gRPC exporter self-metrics (#​5668)
• opentelemetry-api: update W3CBaggagePropagator to properly handle whitespace (#​5680)

pandas-dev/pandas (pandas)

v3.0.6: pandas 3.0.6

Compare Source

We are pleased to announce the release of pandas 3.0.6.
This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version. This is also the first release to support Python 3.15.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher.
The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pydantic/pydantic (pydantic)

v2.13.5

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 8am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Copilot]

🟡 Changes recommended

The lockfile headers now document pip-compile --no-index, which is likely not reproducible in a clean environment and should be corrected (or supplemented with the needed local source flags/documentation).

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Updates pinned Python dependencies used by the tools/pipeline_perf_test orchestrator and load generator to keep the pipeline performance test tooling current and reproducible via refreshed lockfiles.

Changes:

• Bump pydantic to 2.13.5 in both orchestrator and load generator requirements.
• Bump grpcio to 1.83.1 in the load generator requirements.
• Regenerate both requirements.lock.txt files (updated hashes and transitive pins like pydantic-core).

File summaries

File	Description
tools/pipeline_perf_test/orchestrator/requirements.txt	Bumps pydantic pin for the orchestrator.
tools/pipeline_perf_test/orchestrator/requirements.lock.txt	Refreshes orchestrator lockfile for the updated pydantic/transitives.
tools/pipeline_perf_test/load_generator/requirements.txt	Bumps grpcio and pydantic pins for the load generator.
tools/pipeline_perf_test/load_generator/requirements.lock.txt	Refreshes load generator lockfile for the updated pins and transitive dependencies.

Review details

• Files reviewed: 4/4 changed files
• Comments generated: 2
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[opentelemetry-pr-dashboard]

Pull request dashboard status

Merged · refreshed 2026-09-28 16:38 UTC

Status above doesn't look right?

• Anything look wrong? Report it with what you expected; it helps us improve the dashboard.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.43%. Comparing base (0a38e64) to head (a250c2f).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #4010   +/-   ##
=======================================
  Coverage   88.43%   88.43%           
=======================================
  Files         939      939           
  Lines      379536   379536           
=======================================
  Hits       335651   335651           
  Misses      43885    43885           

Components	Coverage Δ
otap-dataflow	89.36% <ø> (ø)
data_engine	87.83% <ø> (ø)
otel-arrow-go	57.57% <ø> (ø)
quiver	92.27% <ø> (ø)

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.