elastic-apm 4.7.3 → 4.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0fb7f8389ec374ccb57a8496ba24e365006ce44590d4ab064763133c8129cdf4
-  data.tar.gz: 4010d4aeaea7c13d15cfd6a0fce757ab1d7477b5be7a72d350012a07a6b473a6
+  metadata.gz: 31edb9bba2adf03fbf15be845cbf4b9612b9d53821cb628d0e58b8433a913645
+  data.tar.gz: 7d2ea706462aa65a194292d6014618ed869468e30269de1d1c58b6b744e7a89b
 SHA512:
-  metadata.gz: 5e0a026ec99b9ccd90c2f17ce4929cc583dc331582a9ad5e64b71410c0099da6f8478d3306c72d8cd9031d8c728f86d663325fdafe16381dd15a0302317fd747
-  data.tar.gz: 3df0f2d41ab038328f30ddbf7e88e2a3c0708004b64de06df165bfb073dde2bf37a546cf4b6a3c3f7c5971ff27698094cf48f480df96dff2c639b3b6986d47af
+  metadata.gz: 6115cc9c39a67366f472436d6f0e22df08518915581361d2ee5999846d0a65238bdfe79e9522f38b1d19312642c09bc1bb5abb7a021efc3b138d24525fb53ccd
+  data.tar.gz: 250ece59f0403da4844ca5108559a1a434cceec6dbb2fb5dfb3113d6f466553f5dbf97e820cdeb4b2c6f05de67891521174a1f6f6a32aedd9ee8fd9ffc50032c

data/.ci/.exclude.yml

@@ -2,19 +2,15 @@ exclude:
   # Ruby 2.4
   # Only test on rails-4.2, sinatra-1.4
   - VERSION: ruby:2.4
-    FRAMEWORK: rails-7.0
+    FRAMEWORK: rails-7.2
   - VERSION: ruby:2.4
     FRAMEWORK: rails-6.1
-  - VERSION: ruby:2.4
-    FRAMEWORK: rails-6.0
   - VERSION: ruby:2.4
     FRAMEWORK: rails-5.2
   - VERSION: ruby:2.4
     FRAMEWORK: sinatra-2.2
   - VERSION: ruby:2.4
     FRAMEWORK: grape-1.6
-  - VERSION: ruby:2.4
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-6.0
   - VERSION: ruby:2.4
     FRAMEWORK: rails-main
   - VERSION: ruby:2.4
@@ -24,9 +20,9 @@ exclude:
 
   # rails-4.2 exclusions
   # Only test on ruby 2.4
-  - VERSION: ruby:3.1
+  - VERSION: ruby:3.4
     FRAMEWORK: rails-4.2
-  - VERSION: ruby:3.0
+  - VERSION: ruby:3.1
     FRAMEWORK: rails-4.2
   - VERSION: ruby:2.7
     FRAMEWORK: rails-4.2
@@ -43,8 +39,6 @@ exclude:
   # sinatra-1.4 exclusions
   - VERSION: ruby:3.1
     FRAMEWORK: sinatra-1.4
-  - VERSION: ruby:3.0
-    FRAMEWORK: sinatra-1.4
   - VERSION: ruby:2.7
     FRAMEWORK: sinatra-1.4
   - VERSION: jruby:9.2
@@ -56,22 +50,18 @@ exclude:
   - VERSION: elasticobservability/jruby:9.2-8-jdk
     FRAMEWORK: sinatra-1.4
 
-  # rails-6.0 and rails-6.1 exclusions
+  # rails-6.1 and rails 7.0 exclusions
   # Don't test on ruby 2.4
   - VERSION: ruby:2.4
     FRAMEWORK: rails-6.1
   - VERSION: ruby:2.4
-    FRAMEWORK: rails-6.0
+    FRAMEWORK: rails-7.2
 
   # Only test rails main on ruby 3.1
-  - VERSION: ruby:3.0
-    FRAMEWORK: rails-main
   - VERSION: ruby:2.7
     FRAMEWORK: rails-main
   - VERSION: ruby:2.6
     FRAMEWORK: rails-main
-  - VERSION: ruby:2.5
-    FRAMEWORK: rails-main
   - VERSION: ruby:2.4
     FRAMEWORK: rails-main
   - VERSION: jruby:9.2
@@ -83,29 +73,27 @@ exclude:
   - VERSION: elasticobservability/jruby:9.2-8-jdk
     FRAMEWORK: rails-main
 
-  # Only test rails 7.0 on ruby >= 2.7
+  # Only test rails 7.2 on ruby >= 3.4
+  - VERSION: ruby:3.1
+    FRAMEWORK: rails-7.2
+  - VERSION: ruby:2.7
+    FRAMEWORK: rails-7.2
   - VERSION: ruby:2.6
-    FRAMEWORK: rails-7.0
-  - VERSION: ruby:2.5
-    FRAMEWORK: rails-7.0
+    FRAMEWORK: rails-7.2
   - VERSION: ruby:2.4
-    FRAMEWORK: rails-7.0
+    FRAMEWORK: rails-7.2
   - VERSION: jruby:9.2
-    FRAMEWORK: rails-7.0
+    FRAMEWORK: rails-7.2
   - VERSION: elasticobservability/jruby:9.2-13-jdk
-    FRAMEWORK: rails-7.0
+    FRAMEWORK: rails-7.2
   - VERSION: elasticobservability/jruby:9.2-11-jdk
-    FRAMEWORK: rails-7.0
+    FRAMEWORK: rails-7.2
   - VERSION: elasticobservability/jruby:9.2-8-jdk
-    FRAMEWORK: rails-7.0
+    FRAMEWORK: rails-7.2
 
   # Only test sinatra main on ruby 2.7 and ruby 3.1
-  - VERSION: ruby:3.0
-    FRAMEWORK: sinatra-main
   - VERSION: ruby:2.6
     FRAMEWORK: sinatra-main
-  - VERSION: ruby:2.5
-    FRAMEWORK: sinatra-main
   - VERSION: ruby:2.4
     FRAMEWORK: sinatra-main
   - VERSION: jruby:9.2
@@ -117,10 +105,12 @@ exclude:
   - VERSION: elasticobservability/jruby:9.2-8-jdk
     FRAMEWORK: sinatra-main
 
-  # Only test grape master on ruby 2.7 and ruby 3.0
-  - VERSION: ruby:2.6
+  # Only test grape master on ruby >= 3.2
+  - VERSION: ruby:3.1
     FRAMEWORK: grape-master
-  - VERSION: ruby:2.5
+  - VERSION: ruby:2.7
+    FRAMEWORK: grape-master
+  - VERSION: ruby:2.6
     FRAMEWORK: grape-master
   - VERSION: ruby:2.4
     FRAMEWORK: grape-master
@@ -133,61 +123,16 @@ exclude:
   - VERSION: elasticobservability/jruby:9.2-8-jdk
     FRAMEWORK: grape-master
 
-  # grape 1.5 doesn't support ruby 3.0
-  - VERSION: ruby:3.1
-    FRAMEWORK: grape-1.6
-  - VERSION: ruby:3.1
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-7.0
+  # grape 1.5 doesn't support ruby 3.1
   - VERSION: ruby:3.1
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-6.1
-  - VERSION: ruby:3.0
     FRAMEWORK: grape-1.6
-  - VERSION: ruby:3.0
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-6.1
 
-  # only test ruby >= 3.0 with rails 6.0 and rails 6.1
-  - VERSION: ruby:3.1
+  # only test ruby >= 3.1 with rails 6.1 and rails 7.0
+  - VERSION: ruby:3.4
     FRAMEWORK: rails-5.2
-  - VERSION: ruby:3.1
+  - VERSION: ruby:3.4
     FRAMEWORK: rails-5.1
-  - VERSION: ruby:3.0
+  - VERSION: ruby:3.1
     FRAMEWORK: rails-5.2
-  - VERSION: ruby:3.0
+  - VERSION: ruby:3.1
     FRAMEWORK: rails-5.1
-
-  # Unsupported
-  # Ruby 2.6
-  - VERSION: ruby:2.6
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-6.1
-  - VERSION: ruby:2.6
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-7.0
-  # Ruby 2.5
-  - VERSION: ruby:2.5
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-6.1
-  - VERSION: ruby:2.5
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-7.0
-  # Ruby 2.4
-  - VERSION: ruby:2.4
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-6.1
-  - VERSION: ruby:2.4
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-7.0
-  # JRuby 9.2
-  - VERSION: jruby:9.2
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-6.1
-  - VERSION: jruby:9.2
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-7.0
-  # JRuby 9.2-13-jdk
-  - VERSION: elasticobservability/jruby:9.2-13-jdk
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-6.1
-  - VERSION: elasticobservability/jruby:9.2-13-jdk
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-7.0
-  # JRuby 9.2-11-jdk
-  - VERSION: elasticobservability/jruby:9.2-11-jdk
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-6.1
-  - VERSION: elasticobservability/jruby:9.2-11-jdk
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-7.0
-  # JRuby 9.2-8-jdk
-  - VERSION: elasticobservability/jruby:9.2-8-jdk
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-6.1
-  - VERSION: elasticobservability/jruby:9.2-8-jdk
-    FRAMEWORK: grape-1.6,sinatra-2.2,rails-7.0

data/.ci/.framework.yml

@@ -1,7 +1,6 @@
 FRAMEWORK:
-  - rails-7.0
+  - rails-7.2
   - rails-6.1
-  - rails-6.0
   - rails-5.2
   - rails-4.2
 
@@ -9,5 +8,3 @@ FRAMEWORK:
   - sinatra-1.4
 
   - grape-1.6
-
-  - grape-1.6,sinatra-2.2,rails-6.1

data/.ci/.ruby.yml

@@ -1,6 +1,6 @@
 VERSION:
+  - ruby:3.4
   - ruby:3.1
-  - ruby:3.0
   - ruby:2.7
   - ruby:2.6
   - ruby:2.4

data/.ci/updatecli/values.d/apm-data-spec.yml

@@ -0,0 +1 @@
+apm_schema_specs_path: spec/fixtures

data/.ci/updatecli/values.d/apm-gherkin.yml

@@ -0,0 +1 @@
+apm_gherkin_specs_path: features

data/.ci/updatecli/values.d/apm-json-specs.yml

@@ -0,0 +1 @@
+apm_json_specs_path: spec/fixtures

data/.ci/updatecli/values.d/scm.yml

@@ -0,0 +1,10 @@
+scm:
+  enabled: true
+  owner: elastic
+  repository: apm-agent-ruby
+  branch: main
+  commitusingapi: true
+  # begin update-compose policy values
+  user: obltmachine
+  email: obltmachine@users.noreply.github.com
+  # end update-compose policy values

data/.ci/updatecli/values.d/update-compose.yml

@@ -0,0 +1,3 @@
+spec:
+  files:
+    - "updatecli-compose.yaml"

data/.github/CODEOWNERS

@@ -0,0 +1 @@
+/.github/workflows @elastic/observablt-ci

data/.github/PULL_REQUEST_TEMPLATE.md

@@ -46,8 +46,8 @@ Update your local repository with the most recent code from the main repo, and r
 Run the test suite to make sure that nothing is broken. See https://github.com/elastic/apm-agent-ruby/blob/main/CONTRIBUTING.md#testing for details.
 -->
 - [ ] I have made corresponding changes to the documentation
-- [ ] I have updated [CHANGELOG.asciidoc](CHANGELOG.asciidoc)
-- [ ] I have updated [supported-technologies.asciidoc](docs/supported-technologies.asciidoc)
+- [ ] I have updated [docs/release-notes/index.md](../docs/release-notes/index.md)
+- [ ] I have updated [docs/reference/supported-technologies.md](../docs/reference/supported-technologies.md)
 - [ ] Added an API method or config option? Document in which version this will be introduced
 
 ## Related issues

data/.github/dependabot.yml

@@ -1,31 +1,34 @@
+---
 version: 2
 updates:
-- package-ecosystem: bundler
-  directory: "/"
-  schedule:
-    interval: "weekly"
-    day: "sunday"
-    time: "22:00"
-  open-pull-requests-limit: 10
-  ignore:
-  - dependency-name: sucker_punch
-    versions:
-    - "> 2.0"
-  - dependency-name: i18n
-    versions:
-    - 1.8.10
-    - 1.8.8
-    - 1.8.9
 
-  # GitHub actions
+  - package-ecosystem: bundler
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "sunday"
+      time: "22:00"
+    open-pull-requests-limit: 5
+    ignore:
+    - dependency-name: sucker_punch
+      versions:
+        - "> 2.0"
+    - dependency-name: i18n
+      versions:
+        - 1.8.10
+        - 1.8.8
+        - 1.8.9
+
+  # Maintain dependencies for GitHub Actions (/.github/workflows)
   - package-ecosystem: "github-actions"
     directory: "/"
-    reviewers:
-      - "elastic/observablt-ci"
     schedule:
       interval: "weekly"
       day: "sunday"
       time: "22:00"
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
     groups:
       github-actions:
         patterns:

data/.github/workflows/README.md

@@ -11,7 +11,6 @@ There are 5 main stages that run on GitHub actions:
 There are some other stages that run for every push on the main branches:
 
 * [Microbenchmark](./microbenchmark.yml)
-* [Snapshoty](./snapshoty.yml)
 
 ### Scenarios
 
@@ -50,7 +49,7 @@ The tag release follows the naming convention: `v.<major>.<minor>.<patch>`, wher
 
 ### OpenTelemetry
 
-There is a GitHub workflow in charge to populate what the workflow run in terms of jobs and steps. Those details can be seen in [here](https://ela.st/oblt-ci-cd-stats) (**NOTE**: only available for Elasticians).
+Every workflow and its logs are exported to OpenTelemetry traces/logs/metrics. Those details can be seen [here](https://ela.st/oblt-ci-cd-stats) (**NOTE**: only available for Elasticians).
 
 ## Bump automation
 

data/.github/workflows/addToProject.yml

@@ -5,8 +5,6 @@ on:
     types: [opened, edited, milestoned]
   pull_request_target:
     types: [opened, edited, milestoned]
-env:
-  MY_GITHUB_TOKEN: ${{ secrets.APM_TECH_USER_TOKEN }}
 
 permissions:
   contents: read
@@ -16,17 +14,50 @@ jobs:
     runs-on: ubuntu-latest
     name: Assign milestoned to Project
     steps:
-    - name: Assign issues with milestones to project
-      uses: elastic/assign-one-project-github-action@1.2.2
+    - name: Get token
+      id: get_token
+      uses: actions/create-github-app-token@v3
+      with:
+        app-id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
+        private-key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
+        permission-organization-projects: write
+        permission-issues: read
+        permission-pull-requests: read
+
+    - name: Add milestoned issues to project
+      id: add-issue-to-project
+      if: github.event.issue && github.event.issue.milestone
+      uses: elastic/oblt-actions/github/project-add@v1
+      with:
+        github-token: ${{ steps.get_token.outputs.token }}
+        project-id: 1674
+        item-url: ${{ github.event.issue.html_url }}
+
+    - name: Set issue status to Planned
       if: github.event.issue && github.event.issue.milestone
+      uses: elastic/oblt-actions/github/project-field-set@v1
       with:
-        project: 'https://github.com/orgs/elastic/projects/454'
-        project_id: '5882982'
-        column_name: 'Planned'
-    - name: Assign new pull requests to project
-      uses: elastic/assign-one-project-github-action@1.2.2
+        github-token: ${{ steps.get_token.outputs.token }}
+        project-id: 1674
+        item-id: ${{ steps.add-issue-to-project.outputs.item-id }}
+        field-name: Status
+        field-value: Planned
+
+    - name: Add new pull requests to project
+      id: add-pr-to-project
+      if: github.event.action == 'opened' && github.event.pull_request
+      uses: elastic/oblt-actions/github/project-add@v1
+      with:
+        github-token: ${{ steps.get_token.outputs.token }}
+        project-id: 1674
+        item-url: ${{ github.event.pull_request.html_url }}
+
+    - name: Set pull request status to In Progress
       if: github.event.action == 'opened' && github.event.pull_request
+      uses: elastic/oblt-actions/github/project-field-set@v1
       with:
-        project: 'https://github.com/orgs/elastic/projects/454'
-        project_id: '5882982'
-        column_name: 'In Progress'
+        github-token: ${{ steps.get_token.outputs.token }}
+        project-id: 1674
+        item-id: ${{ steps.add-pr-to-project.outputs.item-id }}
+        field-name: Status
+        field-value: In Progress

data/.github/workflows/ci.yml

@@ -19,7 +19,7 @@ jobs:
   sanity-checks:
     runs-on: ubuntu-latest
     steps:
-      - uses: elastic/apm-pipeline-library/.github/actions/pre-commit@current
+      - uses: elastic/oblt-actions/pre-commit@v1
 
   # Invokes the actual matrix workflow with the provided files.
   matrix:
@@ -41,7 +41,7 @@ jobs:
   package:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: 2.6
@@ -49,7 +49,7 @@ jobs:
         run: .ci/scripts/install-build-system.sh
       - name: Create gem
         run: rake build
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: package
           path: ./pkg/**/*
@@ -64,7 +64,7 @@ jobs:
       - package
     steps:
       - id: check
-        uses: elastic/apm-pipeline-library/.github/actions/check-dependent-jobs@current
+        uses: elastic/oblt-actions/check-dependent-jobs@v1
         with:
-          needs: ${{ toJSON(needs) }}
-      - run: ${{ steps.check.outputs.isSuccess }}
+          jobs: ${{ toJSON(needs) }}
+      - run: ${{ steps.check.outputs.is-success }}

data/.github/workflows/docs-build.yml

@@ -0,0 +1,16 @@
+name: docs-build
+on:
+  pull_request:
+    branches: [main]
+    types: [opened, synchronize, reopened]
+  push:
+    branches: [main]
+  merge_group: ~
+permissions:
+  contents: read
+  pull-requests: read
+jobs:
+  build:
+    uses: elastic/docs-actions/.github/workflows/docs-build.yml@v1
+    with:
+      enable-vale-linting: true

data/.github/workflows/docs-deploy.yml

@@ -0,0 +1,16 @@
+name: docs-deploy
+on:
+  workflow_run:
+    workflows: [docs-build]
+    types: [completed]
+permissions:
+  contents: read
+  deployments: write
+  id-token: write
+  pull-requests: write
+  actions: read
+jobs:
+  deploy:
+    uses: elastic/docs-actions/.github/workflows/docs-deploy.yml@v1
+    with:
+      enable-vale-linting: true

data/.github/workflows/docs-preview-cleanup.yml

@@ -0,0 +1,12 @@
+name: docs-preview-cleanup
+on:
+  pull_request_target:
+    branches: [main]
+    types: [closed]
+permissions:
+  contents: none
+  deployments: write
+  id-token: write
+jobs:
+  cleanup:
+    uses: elastic/docs-actions/.github/workflows/docs-preview-cleanup.yml@v1

data/.github/workflows/github-commands-comment.yml

@@ -0,0 +1,18 @@
+---
+name: github-commands-comment
+
+on:
+  pull_request_target:
+    types:
+      - opened
+
+permissions:
+  contents: read
+
+jobs:
+  comment:
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+    steps:
+      - uses: elastic/oblt-actions/elastic/github-commands@v1

data/.github/workflows/microbenchmark.yml

@@ -16,33 +16,16 @@ permissions:
 jobs:
   microbenchmark:
     runs-on: ubuntu-latest
-    # wait up to 1 hour
-    timeout-minutes: 60
+    timeout-minutes: 5
     steps:
-      - id: buildkite
-        name: Run buildkite pipeline
-        uses: elastic/apm-pipeline-library/.github/actions/buildkite@current
+      - name: Run microbenchmark
+        uses: elastic/oblt-actions/buildkite/run@v1
         with:
-          vaultUrl: ${{ secrets.VAULT_ADDR }}
-          vaultRoleId: ${{ secrets.VAULT_ROLE_ID }}
-          vaultSecretId: ${{ secrets.VAULT_SECRET_ID }}
-          pipeline: apm-agent-microbenchmark
-          triggerMessage: "${{ github.repository }}@${{ github.ref_name }}"
-          waitFor: true
-          printBuildLogs: true
-          buildEnvVars: |
+          pipeline: "apm-agent-microbenchmark"
+          token: ${{ secrets.BUILDKITE_TOKEN }}
+          wait-for: false
+          env-vars: |
             script=.ci/scripts/bench.sh
             repo=apm-agent-ruby
             sha=${{ github.sha }}
             BRANCH_NAME=${{ github.ref_name }}
-
-      - if: ${{ failure() }}
-        uses: elastic/apm-pipeline-library/.github/actions/slack-message@current
-        with:
-          url: ${{ secrets.VAULT_ADDR }}
-          roleId: ${{ secrets.VAULT_ROLE_ID }}
-          secretId: ${{ secrets.VAULT_SECRET_ID }}
-          channel: "#apm-agent-ruby"
-          message: |
-            :ghost: [${{ github.repository }}] microbenchmark *${{ github.ref_name }}* failed to run in Buildkite.
-            Build: (<${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|here>)

data/.github/workflows/release.yml

@@ -4,51 +4,68 @@ on:
   push:
     tags:
       - "v[0-9]+*"
+    branches:
+      - main
 
 permissions:
-  contents: write
+  contents: read
 
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      artifact-metadata: write
+      attestations: write
+      contents: write
+      id-token: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: 2.6
-      - uses: hashicorp/vault-action@v2.4.2
-        with:
-          url: ${{ secrets.VAULT_ADDR }}
-          method: approle
-          roleId: ${{ secrets.VAULT_ROLE_ID }}
-          secretId: ${{ secrets.VAULT_SECRET_ID }}
-          secrets: |
-            secret/apm-team/ci/apm-agent-ruby-rubygems-release apiKey | API_KEY ;
       - name: RubyGems login
         run: |
           RUBY_HOME="${HOME}/.gem"
           RUBY_CREDENTIALS_FILE="${RUBY_HOME}/credentials"
           mkdir -p "${RUBY_HOME}"
           echo '---' > "${RUBY_CREDENTIALS_FILE}"
-          echo ":rubygems_api_key: ${API_KEY}" >> "${RUBY_CREDENTIALS_FILE}"
+          echo ":rubygems_api_key: ${{ secrets.RUBYGEMS_API_KEY }}" >> "${RUBY_CREDENTIALS_FILE}"
           chmod 0600 "${RUBY_CREDENTIALS_FILE}"
+
       - name: Install build system
         run: .ci/scripts/install-build-system.sh
-      - run: rake release
+
+      - name: rake release (only for tags)
+        run: rake release
+        if: startsWith(github.ref, 'refs/tags')
+
+      - name: rake build
+        run: rake build
+        if:  ${{ ! startsWith(github.ref, 'refs/tags') }}
+
+      - name: generate build provenance
+        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be  # v2.4.0
+        with:
+          subject-path: "${{ github.workspace }}/pkg/*.gem" 
+      
   update-branch:
     needs:
       - release
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: 2.6
       - name: Setup Git
-        uses: elastic/apm-pipeline-library/.github/actions/setup-git@current
+        uses: elastic/oblt-actions/git/setup@v1
       - name: Install build system
         run: .ci/scripts/install-build-system.sh
-      - run: rake release:update_branch
+      - name: rake release:update_branch (only for tags)
+        run: rake release:update_branch
+        if: startsWith(github.ref, 'refs/tags')
 
   status:
     if: always()
@@ -58,14 +75,13 @@ jobs:
       - update-branch
     steps:
       - id: check
-        uses: elastic/apm-pipeline-library/.github/actions/check-dependent-jobs@current
+        uses: elastic/oblt-actions/check-dependent-jobs@v1
         with:
-          needs: ${{ toJSON(needs) }}
-      - run: ${{ steps.check.outputs.isSuccess }}
-      - if: always()
-        uses: elastic/apm-pipeline-library/.github/actions/notify-build-status@current
+          jobs: ${{ toJSON(needs) }}
+      - run: ${{ steps.check.outputs.is-success }}
+      - if: ${{ always() && startsWith(github.ref, 'refs/tags') }}
+        uses: elastic/oblt-actions/slack/notify-result@v1
         with:
-          vaultUrl: ${{ secrets.VAULT_ADDR }}
-          vaultRoleId: ${{ secrets.VAULT_ROLE_ID }}
-          vaultSecretId: ${{ secrets.VAULT_SECRET_ID }}
-          slackChannel: "#apm-agent-ruby"
+          bot-token: ${{ secrets.SLACK_BOT_TOKEN }}
+          channel-id: "#apm-agent-ruby"
+          message: ":traffic_cone: updatecli failed for `${{ github.repository }}@${{ github.ref_name }}`, @robots-ci please look what's going on <https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}|here>"