OpenTelemetry requirements too strict

[majikman111]

Description

The OpenTelemetry requirements in requirements.txt are too strict and force installing a single opentelemtry-api/sdk package, v 1.22.0.

Requirements specified here should be ~=1.22 OR use ranges of tested versions instead.

Due to this issue, my organization cannot upgrade our OpenCTI instance beyond version 6.1 as we use a newer version of OpenTelemetry for monitoring custom connectors.

Reproducible Steps

Steps to create the smallest reproducible scenario:

1. pip install "pycti" "opentelemetry-api>1.22"

Expected Output

Latest PyCTI and Opentelemetry packages should be installed.

Actual Output

Maximum allowable pycti version installed is 6.1.4 with these constraints.

[gbikram]

We have been encountering the same issue where our OpenTelemetry instance is running a newer version. As a result, we are unable to update our OpenCTI deployment. Would highly appreciate if the proposed fix can be implemented some time soon i.e change opentelemetry-api~=1.22.0 to opentelemetry-api~=1.22. Thank you

[nino-filigran]

@majikman111 & @gbikram it's something that we're aware of and will try to prioritize!