fix: traceId is not available in OTEL logs if proxy context doesn't exist

[astsiapanay]

No description provided.

[ai-dial-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 23 package(s) with unknown licenses.
• ⚠️ 3 packages with OpenSSF Scorecard issues.

See the Details below.

License Issues

settings.gradle

Package	Version	License	Issue Type
com.gradle:common-custom-user-data-gradle-plugin	2.1	Null	Unknown License
com.gradle:develocity-gradle-plugin	3.19.2	Null	Unknown License
org.apache.jclouds.api:atmos	2.7.3	Null	Unknown License
org.apache.jclouds.api:filesystem	2.7.3	Null	Unknown License
org.apache.jclouds.api:glacier	2.7.3	Null	Unknown License
org.apache.jclouds.api:oauth	2.7.3	Null	Unknown License
org.apache.jclouds.api:openstack-keystone	2.7.3	Null	Unknown License
org.apache.jclouds.api:openstack-swift	2.7.3	Null	Unknown License
org.apache.jclouds.api:rackspace-cloudfiles	2.7.3	Null	Unknown License
org.apache.jclouds.api:rackspace-cloudidentity	2.7.3	Null	Unknown License
org.apache.jclouds.api:s3	2.7.3	Null	Unknown License
org.apache.jclouds.api:sts	2.7.3	Null	Unknown License
org.apache.jclouds.common:googlecloud	2.7.3	Null	Unknown License
org.apache.jclouds.provider:aws-s3	2.7.3	Null	Unknown License
org.apache.jclouds.provider:azureblob	2.7.3	Null	Unknown License
org.apache.jclouds.provider:b2	2.7.3	Null	Unknown License
org.apache.jclouds.provider:google-cloud-storage	2.7.3	Null	Unknown License
org.apache.jclouds.provider:rackspace-cloudfiles-uk	2.7.3	Null	Unknown License
org.apache.jclouds.provider:rackspace-cloudfiles-us	2.7.3	Null	Unknown License
org.glassfish.jaxb:txw2	4.0.5	Null	Unknown License
org.apache.jclouds:jclouds-allblobstore	2.7.3	Null	Unknown License
org.apache.jclouds:jclouds-blobstore	2.7.3	Null	Unknown License
org.apache.jclouds:jclouds-core	2.7.3	Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package	Version	Score	Details
maven/aopalliance:aopalliance	1.0	Unknown	Unknown
maven/com.google.inject.extensions:guice-assistedinject	7.0.0	🟢 5.8	Details Check Score Reason Maintained ⚠️ 0 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Code-Review ⚠️ 1 Found 4/29 approved changesets -- score normalized to 1 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing 🟢 10 project is fuzzed Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy 🟢 10 security policy file detected Signed-Releases ⚠️ -1 no releases found SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 8 2 existing vulnerabilities detected
maven/com.google.inject:guice	7.0.0	🟢 5.8	Details Check Score Reason Maintained ⚠️ 0 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Code-Review ⚠️ 1 Found 4/29 approved changesets -- score normalized to 1 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing 🟢 10 project is fuzzed Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy 🟢 10 security policy file detected Signed-Releases ⚠️ -1 no releases found SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 8 2 existing vulnerabilities detected
maven/com.gradle:common-custom-user-data-gradle-plugin	2.1	Unknown	Unknown
maven/com.gradle:develocity-gradle-plugin	3.19.2	Unknown	Unknown
maven/com.sun.istack:istack-commons-runtime	4.1.2	🟢 5.5	Details Check Score Reason Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Code-Review 🟢 10 all changesets reviewed Maintained ⚠️ 0 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy 🟢 10 security policy file detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 10 0 existing vulnerabilities detected
maven/jakarta.activation:jakarta.activation-api	2.1.3	Unknown	Unknown
maven/jakarta.annotation:jakarta.annotation-api	2.0.0	Unknown	Unknown
maven/jakarta.inject:jakarta.inject-api	2.0.1	Unknown	Unknown
maven/jakarta.ws.rs:jakarta.ws.rs-api	3.0.0	Unknown	Unknown
maven/jakarta.xml.bind:jakarta.xml.bind-api	4.0.2	Unknown	Unknown
maven/org.apache.jclouds.api:atmos	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:filesystem	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:glacier	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:oauth	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:openstack-keystone	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:openstack-swift	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:rackspace-cloudfiles	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:rackspace-cloudidentity	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:s3	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:sts	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.common:googlecloud	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.provider:aws-s3	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.provider:azureblob	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.provider:b2	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.provider:google-cloud-storage	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.provider:rackspace-cloudfiles-uk	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.provider:rackspace-cloudfiles-us	2.7.3	Unknown	Unknown
maven/org.apache.jclouds:jclouds-allblobstore	2.7.3	⚠️ 2.5	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Code-Review ⚠️ 0 Found 2/30 approved changesets -- score normalized to 0 Dangerous-Workflow ⚠️ -1 no workflows found Maintained ⚠️ 0 project is archived Token-Permissions ⚠️ -1 No tokens found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected License ⚠️ 0 license file not detected Binary-Artifacts 🟢 10 no binaries found in the repo Signed-Releases ⚠️ -1 no releases found Pinned-Dependencies ⚠️ -1 no dependencies found Fuzzing ⚠️ 0 project is not fuzzed Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 9 1 existing vulnerabilities detected
maven/org.apache.jclouds:jclouds-blobstore	2.7.3	⚠️ 2.5	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Code-Review ⚠️ 0 Found 2/30 approved changesets -- score normalized to 0 Dangerous-Workflow ⚠️ -1 no workflows found Maintained ⚠️ 0 project is archived Token-Permissions ⚠️ -1 No tokens found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected License ⚠️ 0 license file not detected Binary-Artifacts 🟢 10 no binaries found in the repo Signed-Releases ⚠️ -1 no releases found Pinned-Dependencies ⚠️ -1 no dependencies found Fuzzing ⚠️ 0 project is not fuzzed Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 9 1 existing vulnerabilities detected
maven/org.apache.jclouds:jclouds-core	2.7.3	⚠️ 2.5	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Code-Review ⚠️ 0 Found 2/30 approved changesets -- score normalized to 0 Dangerous-Workflow ⚠️ -1 no workflows found Maintained ⚠️ 0 project is archived Token-Permissions ⚠️ -1 No tokens found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected License ⚠️ 0 license file not detected Binary-Artifacts 🟢 10 no binaries found in the repo Signed-Releases ⚠️ -1 no releases found Pinned-Dependencies ⚠️ -1 no dependencies found Fuzzing ⚠️ 0 project is not fuzzed Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 9 1 existing vulnerabilities detected
maven/org.checkerframework:checker-qual	3.43.0	🟢 3.5	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Code-Review 🟢 3 Found 10/27 approved changesets -- score normalized to 3 Maintained 🟢 10 30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow ⚠️ -1 no workflows found Token-Permissions ⚠️ -1 No tokens found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected License 🟢 9 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Binary-Artifacts ⚠️ -1 internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found [] Fuzzing ⚠️ 0 project is not fuzzed Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0
maven/org.eclipse.angus:angus-activation	2.0.2	🟢 3.7	Details Check Score Reason Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review ⚠️ 2 Found 5/22 approved changesets -- score normalized to 2 Packaging ⚠️ -1 packaging workflow not detected Maintained 🟢 4 5 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Security-Policy 🟢 10 security policy file detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities ⚠️ 0 22 existing vulnerabilities detected
maven/org.glassfish.jaxb:jaxb-core	4.0.5	🟢 6.6	Details Check Score Reason Maintained 🟢 10 13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review 🟢 6 Found 17/25 approved changesets -- score normalized to 6 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing 🟢 10 project is fuzzed Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Security-Policy 🟢 10 security policy file detected Signed-Releases ⚠️ -1 no releases found SAST 🟢 7 SAST tool detected but not run on all commits Vulnerabilities 🟢 10 0 existing vulnerabilities detected
maven/org.glassfish.jaxb:jaxb-runtime	4.0.5	🟢 6.6	Details Check Score Reason Maintained 🟢 10 13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review 🟢 6 Found 17/25 approved changesets -- score normalized to 6 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing 🟢 10 project is fuzzed Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Security-Policy 🟢 10 security policy file detected Signed-Releases ⚠️ -1 no releases found SAST 🟢 7 SAST tool detected but not run on all commits Vulnerabilities 🟢 10 0 existing vulnerabilities detected
maven/org.glassfish.jaxb:txw2	4.0.5	🟢 6.6	Details Check Score Reason Maintained 🟢 10 13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review 🟢 6 Found 17/25 approved changesets -- score normalized to 6 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing 🟢 10 project is fuzzed Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Security-Policy 🟢 10 security policy file detected Signed-Releases ⚠️ -1 no releases found SAST 🟢 7 SAST tool detected but not run on all commits Vulnerabilities 🟢 10 0 existing vulnerabilities detected

Scanned Files

• settings.gradle