Update maven - #158
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate-main/maven
branch
2 times, most recently
from
July 27, 2026 12:04
a0f7900 to
1779917
Compare
renovate
Bot
force-pushed
the
renovate-main/maven
branch
4 times, most recently
from
July 27, 2026 13:53
d59a141 to
2447c1f
Compare
renovate
Bot
force-pushed
the
renovate-main/maven
branch
4 times, most recently
from
August 2, 2026 01:12
c0c1758 to
67689d3
Compare
renovate
Bot
force-pushed
the
renovate-main/maven
branch
11 times, most recently
from
August 11, 2026 09:43
7524c7d to
8707a5d
Compare
renovate
Bot
force-pushed
the
renovate-main/maven
branch
2 times, most recently
from
August 18, 2026 14:04
601169c to
e235e51
Compare
renovate
Bot
force-pushed
the
renovate-main/maven
branch
17 times, most recently
from
August 24, 2026 14:43
3a7b8ae to
639d7f2
Compare
renovate
Bot
force-pushed
the
renovate-main/maven
branch
3 times, most recently
from
August 28, 2026 12:37
f75c659 to
a6a5812
Compare
renovate
Bot
force-pushed
the
renovate-main/maven
branch
3 times, most recently
from
September 3, 2026 08:13
62ab595 to
61ca5e4
Compare
renovate
Bot
force-pushed
the
renovate-main/maven
branch
from
September 6, 2026 03:53
61ca5e4 to
2e3c2c1
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.5.6→3.6.03.15.0→3.16.02.28.1→2.31.13.32.0-GA→3.33.0-GA4.8.193→4.8.1945.6.0→5.7.03.18.1→3.18.21.16.6→1.17.02.12.6→2.12.71.23.1→1.23.27.9.0→7.10.07.9.0→7.10.03.9.0→3.10.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
open-telemetry/opentelemetry-java-instrumentation (io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom)
v2.31.1Compare Source
This release targets the OpenTelemetry SDK 1.65.0.
Note that many artifacts have the
-alphasuffix attached to their versionnumber, reflecting that they will continue to have breaking changes. Please see
VERSIONING.md
for more details.
🛠️ Bug fixes
autoconfigure and starter artifacts.
(#19754)
v2.31.0Compare Source
This release targets the OpenTelemetry SDK 1.65.0.
Note that many artifacts have the
-alphasuffix attached to their versionnumber, reflecting that they will continue to have breaking changes. Please see
VERSIONING.md
for more details.
ConfigPropertiesBackedConfigProviderand itscreate(ConfigProperties)compatibility API from the declarative config bridge.
(#19305)
opentelemetry-instrumentation-api-incubatoron library instrumentation compileclasspaths.
(#19612)
🚫 Deprecations
otel.instrumentation.experimental.span-suppression-strategyin favor ofExperimental.setSpanSuppressionStrategy(...).(#19180)
HostIdResource.REGISTRY_QUERYin favor of the absolute-pathreg.exelookup used byHostIdResource.(#19293)
MessageOperationin favor ofMessagingOperationType, and theMessageOperationoverloads of
MessagingAttributesExtractor,MessagingConsumerMetrics,MessagingProducerMetrics,MessagingSpanKindExtractor, andMessagingSpanNameExtractorinfavor of the corresponding
MessagingOperationTypeAPIs.(#19357)
otel.traces.exporter=zipkinin favor ofotel.traces.exporter=otlp, andotel.exporter.zipkin.endpointin favor ofotel.exporter.otlp.traces.endpoint.(#19400)
OpenTelemetryMeterRegistryBuilder#setMicrometerHistogramGaugesEnabled(boolean)infavor of
Experimental#setMicrometerHistogramGaugesEnabled(OpenTelemetryMeterRegistryBuilder, boolean).(#19404)
and APIs in favor of selector-based
.included/.excludedconfiguration andIncludeExcludeAPIs.
(#19494,
#19522,
#19523,
#19638)
otel.instrumentation.runtime-telemetry.experimental.prefer-jfrin favor ofotel.instrumentation.runtime-telemetry.experimental.jfr-metrics.included, andsetPreferJfrMetrics(...)in favor ofsetJfrMetrics(RuntimeTelemetryBuilder, IncludeExclude).(#19495)
pairs, logger context, Logstash markers, and structured arguments in favor of
.included/.excludedselectors andIncludeExcludeAPIs.(#19519,
#19520,
#19521,
#19599,
#19600,
#19605,
#19609,
#19610)
general.semconv_stability.opt_inin favor ofgeneral.stability_opt_in_list, andgeneral.sanitization.url.sensitive_query_parameters/developmentin favor ofgeneral.sanitization.url.sensitive_query_parameters.(#19561)
otel.instrumentation.graphql.add-operation-name-to-span-name.enabledin favor ofotel.instrumentation.graphql.operation-name-in-span-name.enabled, andotel.instrumentation.runtime-telemetry.package-emitter.enabled/jars-per-secondin favor ofotel.instrumentation.runtime-telemetry.experimental.package-emitter.enabled/jars-per-second.(#19573)
instrumentations in favor of selector-based
requestHeaders(IncludeExclude)andresponseHeaders(IncludeExclude)APIs.(#19598,
#19601,
#19602,
#19603,
#19604,
#19606,
#19607,
#19608)
otel.instrumentation.micrometer.histogram-gauges.enabledin favor ofotel.instrumentation.micrometer.experimental.histogram-gauges.enabled.(#19613)
🌟 New javaagent instrumentation
(#19091)
(#19243)
(#19392)
(#19456)
(#19472)
📈 Enhancements
they can be consumed directly in OSGi runtimes.
(#18995)
cassandra.compaction.progress.completedandcassandra.compaction.progress.sizegauges forin-flight Cassandra compactions.
(#19290)
otel.semconv-stability.opt-in=messagingacross AWS SQS and Lambda, JMS, Kafka, NATS, Pulsar,RabbitMQ, RocketMQ, Spring Integration, and Spring messaging instrumentations.
(#19347,
#19348,
#19349,
#19350,
#19351,
#19353,
#19354,
#19355,
#19356,
#19476,
#19477,
#19478,
#19479,
#19480,
#19481,
#19482,
#19486,
#19487,
#19499,
#19500,
#19504,
#19505,
#19507,
#19508,
#19535,
#19544,
#19565,
#19567,
#19639,
#19640)
otel.semconv-stability.opt-in=rpc,Dubbo requests to unknown services emit server spans even when decoding fails before
DubboProtocol.getInvoker(), and record the original method inrpc.method_original.(#16668)
baggage.*entries even when there is no current span.(#19378)
otel.instrumentation.common.v3-preview=true, the Micrometer bridge no longer exports.maxgauges for
TimerandDistributionSummary.(#19397)
IncludeExcludeselector API toopentelemetry-instrumentation-apifor matching stringsagainst included and excluded glob patterns.
(#19451)
execution attributes.
(#19629)
otel.semconv-stability.opt-in=database, including operation names, namespaces, collection names,operation parameters, batch telemetry, and error types for Couchbase, Redis clients, Elasticsearch,
R2DBC, JDBC, ClickHouse, MongoDB, and HBase.
(#19616,
#19623,
#19664,
#19665,
#19668,
#19670,
#19704,
#19705,
#19706,
#19707,
#19708)
otel.instrumentation.influxdb.query-sanitization.enabledto control InfluxDB querysanitization, taking precedence over
otel.instrumentation.common.db.query-sanitization.enabled.(#19703)
🛠️ Bug fixes
and Vibur connection pools.
(#19108,
#19159,
#19173,
#19470,
#19471)
unregister on
close().(#19160)
$JAVA_HOME/binunlessotel.javaagent.enabled=trueis set.
(#19203)
jetty.select.countinstead ofjetty.io.select.countforselect-call counts.
(#19249)
(#19340)
(#19365)
server.addressvalues to bare addresses instead of bracketed literals.(#19366)
io.lettuce.core.protocol.OtelCommandArgsUtilas a helper class.(#19373)
host.idresource detection so slow lookup commands no longer block SDKstartup.
(#19377)
Azure SDK tracing.
(#19387)
more reliably.
(#19394)
MethodHandle$1during agent startup to avoidClassCircularityErroron JDK 17 that canbreak invokedynamic call site linking.
(#19398)
URLs, embedded URL credentials, and process command lines.
(#19422,
#19424,
#19425,
#19514)
instruments or registries.
(#19463,
#19466,
#19467)
activemq.destination.temp.utilizationto convert%values to a unitless fraction.(#19512)
jetty.thread.queue.sizeto use the{job}unit instead of{thread}.(#19513)
composite registry or cannot return metric values.
(#19515,
#19541)
Hostheaders are now parsed correctly, including bracketed ports.(#19540)
the extracted producer context when receive telemetry is disabled.
(#19592)
ClusterInvokertype when capturing the consumer registry address.(#19568)
.includedor
.excludedreplacement is also configured.(#19571)
db.nameand stabledb.namespacefor R2DBC spans.(#19615)
PreparedStatement.query()execution keeps the correct
db.systemand connection options.(#19619)
SimpleStatementsanitization so bound values are detected and hidden indb.statement.(#19620)
commitandrollbackoperations.(#19621)
executeBatch()andexecuteLargeBatch()so subsequentbatch spans no longer report stale batch contents.
(#19622)
server.addressandserver.portfor failed Cassandra 3 operations by extracting thecoordinator from
CoordinatorException.(#19627)
db.system.name, so double-quoted identifiers stay intactfor databases that treat them as identifiers.
(#19632)
RequestHandlerinstrumentation sovoid-returninghandleRequestmethods arehandled correctly.
(#19714)
v2.30.0Compare Source
This release targets the OpenTelemetry SDK 1.64.0.
Note that many artifacts have the
-alphasuffix attached to their versionnumber, reflecting that they will continue to have breaking changes. Please see
VERSIONING.md
for more details.
ExperimentalInstrumentationModule#getModuleGroup(). Built-in invokedynamic modules nowshare a single
InstrumentationModuleClassLoader, and each extension is isolated in its own.(#18859)
InstrumentationModule.isIndyModule(); whether a module uses invokedynamicis now determined by the agent rather than declared per module.
(#19140)
SqlClientAttributesGetter,CassandraRequest, andExperimental.(#19165)
Enduser*attribute-capturing APIs from the Spring Security 6.0 library;use the
User*replacements instead.(#19168)
🚫 Deprecations
ConfigPropertiescompatibility bean used withexperimental declarative configuration, in favor of the new
ConfigProviderbean; it will beremoved in 3.0. The
ConfigPropertiesbean remains supported for non-declarative configuration.(#19175)
DeclarativeConfigPropertiesBridgeandDeclarativeConfigPropertiesBridgeBuilder.Use
DeclarativeConfigPropertiesdirectly orDeclarativeConfigBridgeinstead. Will be removedin 3.0.
(#19202)
ConfigPropertiesBackedConfigProviderin favor ofDeclarativeConfigBridge. It will beremoved in 2.31.0.
(#19220)
🌟 New javaagent instrumentation
(#19087)
🌟 New library instrumentation
ThriftTelemetry) for the Apache Thrift 0.13 async server.(#19062)
📈 Enhancements
handlers were previously uninstrumented.
(#18994)
database=as an alias fordatabaseNamewhen extractingdb.namefrom MSSQL JDBCURLs.
(#19029)
(
otel.semconv-stability.opt-in=database) across database instrumentations, including batchspan names,
db.operation.batch.size(including empty batches), anddb.query.summary.(#19034,
#19037,
#19054,
#19055,
#19056,
#19057,
#19143,
#19147,
#19161,
#19162,
#19164,
#19172,
#19189,
#19199)
(#19071)
(#19080)
jvm.thread.virtual.pinnedandjvm.thread.virtual.submit_failedmetrics for Java 19+ virtual threads; enable with
otel.instrumentation.runtime-telemetry.emit-experimental-jfr-metrics=true.(#19092)
PreparedStatement.setObject()in query parameterattributes.
(#19093)
InstrumentationModulenow exposesinjectedClassNames()andexposedClassNames()for indyinstrumentations, so module authors no longer need
ExperimentalInstrumentationModulefor thosehelper-class declarations.
(#19142)
captureTemplateandcaptureArgumentsoptions to the log4j, java-util-logging, andjboss-logmanager logging instrumentations, capturing the log message template and arguments as
separate
log.body.template/log.body.parametersattributes; logback already supported theseoptions (#15423).
(#19154)
server.addressandserver.portattributes to Redisson client spans.(#19191)
server.addressandserver.portattributes to Lettuce Redis client spans.(#19192)
server.addressandserver.portattributes to Rediscala client spans.(#19193)
server.addresson registry-backed Dubbo client spans to the registry address plus theservice target (
registry://host:port/interface:version:group) and leaveserver.portunset,gated behind the stable rpc semconv opt-in (
otel.semconv-stability.opt-in=rpc); the resolvedprovider host and port are kept under the default semconv.
(#17244,
#19285)
🛠️ Bug fixes
during startup.
(#19088)
db.connection_stringvalues so IPv6 hosts stay bracketed instead ofbecoming ambiguous.
(#19078)
extra receive span.
(#19095)
SpringConfigProperties.getMap()no longer evaluates map property values as SpEL expressions;non-special-cased map properties now parse as comma-delimited
key=valuepairs via the SDK'sDefaultConfigProperties, so settings likeotel.instrumentation.common.peer-service-mappingwork without SpEL syntax.
(#19113)
messaging.destination.nameunset instead of reporting it asunknown.(#19115)
jvm.class.loadedandjvm.class.unloadedmetrics to use counterinstruments.
(#19141)
v2.29.0Compare Source
This release targets the OpenTelemetry SDK 1.63.0.
Note that many artifacts have the
-alphasuffix attached to their versionnumber, reflecting that they will continue to have breaking changes. Please see
VERSIONING.md
for more details.
JmxTelemetry.start(...)APIs.(#18782)
package.checksum_algorithm=SHA-256and64-character
package.checksumvalues instead of SHA1 checksums.(#18846)
🚫 Deprecations
otel.instrumentation.common.logging.trace-id-key,otel.instrumentation.common.logging.span-id-key, andotel.instrumentation.common.logging.trace-flags-key, while keeping the old property namesdeprecated.
(#18851)
kafka-brokerandkafka-connectJMX target systems toexperimental-kafka-brokerandexperimental-kafka-connect; the old names still work for nowand log a warning.
(#18971)
🌟 New javaagent instrumentation
(#15589)
(#18253)
📈 Enhancements
otel.semconv.exception.signal.preview=logs.(#16259)
opentelemetry-api-1.63Javaagent instrumentation for OpenTelemetry API 1.63 andopentelemetry-api-incubator1.63.(#18911)
otel.semconv-stability.v3-previewas a fallback for the declarativev3_previewsemconvstability setting.
(#18936)
(
otel.semconv-stability.opt-in=database) across database instrumentations, including span namesand
db.*attributes.(#18808,
#18853,
#18920,
#18922,
#18926,
#18930,
#18970,
#18979,
#18980,
#18984,
#18985,
#18986,
#18987,
#18989,
#18990,
#18992,
#18993,
#19004,
#19005)
(#18964)
opentelemetry-apiandopentelemetry-instrumentation-annotationsenabled underotel.instrumentation.common.v3-previeweven whendefault-enabled=false.(#18792)
otel.instrumentation.common.v3-previewis enabled, affected instrumentations emituser.*identity attributes instead of
enduser.*ones.(#18795)
otel.instrumentation.common.v3-preview=true.(#18828)
metadata.
(#18831)
(#18866)
@WithSpaninstrumentation after other instrumentations so other advice can attachattributes to the active span.
(#18874)
db.client.operation.exceptionlogs whenotel.semconv.exception.signal.previewis enabled.(#18889)
otel.semconv.exception.signal.preview=logsis enabled.(#18890)
otel.semconv.exception.signal.preview.(#18891)
faas.invocation.exceptionlog records for FaaS exceptions whenotel.semconv.exception.signal.preview=logsis enabled.(#18892)
gen_ai.client.operation.exceptionlogs for OpenAI chat and embeddings failures whenotel.semconv.exception.signal.preview=logsis enabled.(#18893)
rpc.client.call.exceptionlog records whenotel.semconv.exception.signal.preview=logsis enabled.(#18894)
semconv.version,semconv.experimental, andsemconv.dual_emitsettings.(#18908)
otel.instrumentation.common.v3-previewis enabled, useotel.semconv-stability.previewinstead ofotel.semconv-stability.opt-into opt in to thenonstable
service.peerandrpcsemantic conventions.(#18914)
@WithSpaninstrumentation by default whenotel.instrumentation.common.v3-preview=true.(#18919)
SqlQueryAnalyzer.analyze()whenotel.instrumentation.common.v3-previewis enabled.(#18921)
otel.instrumentation.common.v3-previewis enabled, deprecated JDBC/db sanitization confignames are ignored in favor of
db.query_sanitization.enabled.(#18934)
jvm.gc.causeon GC duration metrics whenotel.instrumentation.common.v3-previewis enabled.(#18967)
COMMITandROLLBACK.(#19003)
InstrumentationVersionclass in OkHttp 3.0 instead of reading embeddedversion properties, avoiding Android StrictMode disk-read violations.
(#19006)
distribution.spring_starter.thread_details_enabledis set.(#19008)
🛠️ Bug fixes
the active trace.
(#18701)
(#18771)
(#18781)
BedrockconverseStreamNullPointerExceptionwhen a tool call has empty arguments.(#18783)
(#18803)
SQL spans and parameter capture.
(#18885)
otel.instrumentation/development.java.*settings apply correctly.
(#18924)
create tableandalter table.(#18927)
Contextinstead of falling back to span-only recovery.
(#18937)
redis.clients.jedis.Jedis,BinaryJedis, andUnifiedJedis.(#19000)
(#19027)
lysine-dev/okio (com.squareup.okio:okio)
v3.18.22026-09-04
base64 strings to be encoded without padding, even though the previous and expected behavior is
to encode such strings with padding (
=characters). The bug impacts callers who compiledagainst Okio releases
< 3.18.0, and executed on Okio releases>= 3.18.Hakky54/log-captor (io.github.hakky54:logcaptor)
v2.12.7jhy/jsoup (org.jsoup:jsoup)
v1.23.2Improvements
StreamParser.selectFirst(...)calls during progressive parsing, so later matches are returned with their parsed contents when earlier selections had left them as parser lookahead. E.g., given<title>One</title><p id=hit>Full</p><p>Next</p>, seConfiguration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.