Bump the gradle group across 1 directory with 19 updates by dependabot[bot] · Pull Request #1204 · smithy-lang/smithy-java

dependabot · 2026-05-22T16:20:37Z

Bumps the gradle group with 18 updates in the / directory:

Package	From	To
org.apache.logging.log4j:log4j-api	`2.25.4`	`2.26.0`
org.apache.logging.log4j:log4j-core	`2.25.4`	`2.26.0`
org.slf4j:slf4j-api	`2.0.17`	`2.0.18`
io.netty:netty-all	`4.2.13.Final`	`4.2.14.Final`
software.amazon.api.models:s3	`1.0.17`	`1.0.18`
org.slf4j:slf4j-simple	`2.0.17`	`2.0.18`
org.junit.jupiter:junit-jupiter	`6.0.3`	`6.1.0`
software.amazon.awssdk:retries-spi	`2.44.2`	`2.44.11`
software.amazon.awssdk:retries	`2.44.2`	`2.44.11`
software.amazon.awssdk:sdk-core	`2.44.2`	`2.44.11`
software.amazon.awssdk:auth	`2.44.2`	`2.44.11`
io.opentelemetry:opentelemetry-bom	`1.61.0`	`1.62.0`
io.opentelemetry:opentelemetry-api	`1.61.0`	`1.62.0`
io.opentelemetry:opentelemetry-sdk-testing	`1.61.0`	`1.62.0`
org.junit:junit-bom	`6.0.3`	`6.1.0`
software.amazon.api.models:all	`1.0.226`	`1.0.235`
com.diffplug.spotless:spotless-plugin-gradle	`8.4.0`	`8.5.1`
com.autonomousapps:dependency-analysis-gradle-plugin	`3.10.0`	`3.13.0`

Updates org.apache.logging.log4j:log4j-api from 2.25.4 to 2.26.0

Updates org.apache.logging.log4j:log4j-core from 2.25.4 to 2.26.0

Updates org.slf4j:slf4j-api from 2.0.17 to 2.0.18

Updates org.apache.logging.log4j:log4j-core from 2.25.4 to 2.26.0

Updates io.netty:netty-all from 4.2.13.Final to 4.2.14.Final

Release notes

Sourced from io.netty:netty-all's releases.

netty-4.2.14.Final

What's Changed

HTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by @normanmaurer in netty/netty#16748

HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by @normanmaurer in netty/netty#16747

Marshalling: Explicit document security requirements by @normanmaurer in netty/netty#16752

Fix io_uring op completion TRACE logging by @chrisvest in netty/netty#16755

Quic: Ensure writes are done before notify close promise of QuicheQui… by @normanmaurer in netty/netty#16758

Avoid re-parsing openssl key material with non-cached provider by @chrisvest in netty/netty#16759

Pin HTTP/RTSP version + method normalization to Locale.US by @daguimu in netty/netty#16765

Fill MsgHdrMemoryArray#hdrs with null entry on release by @tsegismont in netty/netty#16764

Revapi: Use default "oldVersion" by @chrisvest in netty/netty#16774

Adaptive: Fix concurrency issue in adaptive allocator by @chrisvest in netty/netty#16767

Auto-port 4.2: Make bulk byte moving in ByteBuf faster by @netty-project-bot in netty/netty#16781

Pin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by @daguimu in netty/netty#16768

Remove dead native declarations by @pandareen in netty/netty#16783

Isolate tests that modify available Security providers by @chrisvest in netty/netty#16793

Remove test annotations from a method that isn't a test by @chrisvest in netty/netty#16792

Enable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by @zhangweikop in netty/netty#16523

IoUring: extend user data from short to long by @dreamlike-ocean in netty/netty#16682

Revert CompositeByteBuf component search fast path by @yawkat in netty/netty#16811

HTTP2: Use 100 as default max concurrent streams setting by @normanmaurer in netty/netty#16804

Fix ResumptionController wrapping by @chrisvest in netty/netty#16815

Resolve all localhost addresses without querying DNS servers by @JulianVennen in netty/netty#16749

IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by @normanmaurer in netty/netty#16803

Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by @dreamlike-ocean in netty/netty#16788

Route synchronous onLookupComplete exceptions via fireExceptionCaught by @kwondh5217 in netty/netty#16794

IoUring: Stop generic FileRegion drain loop when transferred() reaches count() by @LuciferYang in netty/netty#16826

MQTT: Allow MQTT 5 CONNECT with password only by @shblue21 in netty/netty#16833

Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16787

New Contributors

@pandareen made their first contribution in netty/netty#16783

@zhangweikop made their first contribution in netty/netty#16523

@JulianVennen made their first contribution in netty/netty#16749

@kwondh5217 made their first contribution in netty/netty#16794

@shblue21 made their first contribution in netty/netty#16833

Full Changelog: netty/netty@netty-4.2.13.Final...netty-4.2.14.Final

Commits

0a60b75 [maven-release-plugin] prepare release netty-4.2.14.Final
72df658 Fix MQTT decoder size check after variable header replay (#16787)
7125dba MQTT: Allow MQTT 5 CONNECT with password only (#16833)
9e19320 IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...
4ce9f17 Route synchronous onLookupComplete exceptions via fireExceptionCaught (#16794)
f7b1b7d Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...
0ccb265 IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...
a6aeb6d Resolve all localhost addresses without querying DNS servers (#16749)
c328ba2 Fix ResumptionController wrapping (#16815)
bc5862b HTTP2: Use 100 as default max concurrent streams setting (#16804)
Additional commits viewable in compare view

Updates software.amazon.api.models:s3 from 1.0.17 to 1.0.18

Commits

See full diff in compare view

Updates software.amazon.api.models:lambda from 1.0.17 to 1.0.18

Updates org.slf4j:slf4j-simple from 2.0.17 to 2.0.18

Updates org.junit.jupiter:junit-jupiter from 6.0.3 to 6.1.0

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0

See Release Notes.

New Contributors

@JarvisCraft made their first contribution in junit-team/junit-framework#5633

@Maran23 made their first contribution in junit-team/junit-framework#5644

Full Changelog: junit-team/junit-framework@r6.0.3...r6.1.0

JUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1

See Release Notes.

New Contributors

@mariokhoury4 made their first contribution in junit-team/junit-framework#4574

@Ogu1208 made their first contribution in junit-team/junit-framework#5145

@HyungGeun94 made their first contribution in junit-team/junit-framework#5271

@yalishevant made their first contribution in junit-team/junit-framework#5316

@JINU-CHANG made their first contribution in junit-team/junit-framework#5290

@jaschdoc made their first contribution in junit-team/junit-framework#5427

@kawshikbuet17 made their first contribution in junit-team/junit-framework#5561

@msridhar made their first contribution in junit-team/junit-framework#5602

Full Changelog: junit-team/junit-framework@r6.1.0-M1...r6.1.0-RC1

JUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1

See Release Notes.

New Contributors

@vy made their first contribution in junit-team/junit-framework#5041

@Pankraz76 made their first contribution in junit-team/junit-framework#5006

@arukiidou made their first contribution in junit-team/junit-framework#5066

@laeubi made their first contribution in junit-team/junit-framework#5092

@jihun4452 made their first contribution in junit-team/junit-framework#5088

@TWiStErRob made their first contribution in junit-team/junit-framework#5133

Full Changelog: junit-team/junit-framework@r6.0.0...r6.1.0-M1

Commits

0dc3af1 Release 6.1.0
1d13002 Prepare 6.1.0 release notes
072b217 Update plugin spotless to v8.5.0 (#5668)
3a53480 Update Gradle to v9.5.1 (#5666)
0e18a20 Update zizmorcore/zizmor-action action to v0.5.4 (#5669)
0a2634f Update github/codeql-action action to v4.35.5 (#5671)
4dbd556 Restructure workflows to have single "status" job (#5670)
f2194ce Increase timeout to reduce flakiness
5c8fdd2 Update dependency org.apache.groovy:groovy to v5.0.6 (#5659)
43c6982 Update dependency org.slf4j:slf4j-jdk14 to v2.0.18 (#5667)
Additional commits viewable in compare view

Updates software.amazon.awssdk:retries-spi from 2.44.2 to 2.44.11

Updates software.amazon.awssdk:retries from 2.44.2 to 2.44.11

Updates software.amazon.awssdk:sdk-core from 2.44.2 to 2.44.11

Updates software.amazon.awssdk:auth from 2.44.2 to 2.44.11

Updates software.amazon.awssdk:retries from 2.44.2 to 2.44.11

Updates software.amazon.awssdk:sdk-core from 2.44.2 to 2.44.11

Updates software.amazon.awssdk:auth from 2.44.2 to 2.44.11

Updates io.opentelemetry:opentelemetry-bom from 1.61.0 to 1.62.0

Release notes

Sourced from io.opentelemetry:opentelemetry-bom's releases.

Version 1.62.0

API

Context

Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

Avoid parentContext allocation on span start for the common case (#8332)

Metrics

Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)

Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)

BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)

OTLP: Fix null input handling in StringEncoder (#8312)

OTLP: Align proto field types and wire tag names in marshalers (#8293)

OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)

OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)

OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)

OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)

Extensions

BREAKING Declarative config: Extract to new opentelemetry-sdk-extension-declarative-config artifact with new package io.opentelemetry.sdk.autoconfigure.declarativeconfig (#8265)

Autoconfigure: Add file size validation in OtlpConfigUtil to avoid unsafe cast to int (#8287)

Declarative config: Fix collection fields to not be initialized to empty by default (#8356)

Incubator: Add EventToSpanEventBridge to bridge log-based events to span events (#8372)

Testing

Add @Nullable to equalTo value argument in OpenTelemetryAssertions (#8301)

Add hasValueSatisfying to LongPointAssert and DoublePointAssert for fuzzy value matching (#8328)

Add containsPointsSatisfying to metric data asserts for "each given assertion must be satisfied by at least one point, extras allowed" checks on sum, gauge, histogram, exponential histogram, and summary data (#8329)

Project tooling

Add initial OSGi support (#7964)

Promote ApiUsageLogger to opentelemetry-common public API (#8318)

Establish exception logging guidelines and fix inconsistent patterns across exporters and SDK (#8231)

Add *.impl.* package naming convention for internal code with japicmp compatibility (#8325)

Add Sonatype dependency audit to build (#8365)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-bom's changelog.

Version 1.62.0 (2026-05-08)

API

Context

Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

Avoid parentContext allocation on span start for the common case (#8332)

Metrics

Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)

Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)

BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)

OTLP: Fix null input handling in StringEncoder (#8312)

OTLP: Align proto field types and wire tag names in marshalers (#8293)

OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)

OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)

OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)

OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)

Extensions

BREAKING Declarative config: Extract to new opentelemetry-sdk-extension-declarative-config artifact with new package io.opentelemetry.sdk.autoconfigure.declarativeconfig (#8265)

Autoconfigure: Add file size validation in OtlpConfigUtil to avoid unsafe cast to int (#8287)

... (truncated)

Commits

d03621f [release/v1.62.x] Prepare release 1.62.0 (#8385)
3a62b7a Prepare 1.62.0 (#8378)
893910b docs: Expand SIG meeting welcoming language (#8383)
03837d3 Apply baggage limits (#8380)
cdadad6 Update dependency org.osgi:org.osgi.test.bom to v1.3.0 (#8376)
8e0f196 Update error-prone monorepo to v2.49.0 (#8259)
2923430 Add initial OSGi support (#7964)
3f3780c Add guidance for null checking, promote ApiUsageLogger to opentelemetry-commo...
e224e19 Port event span event bridge from contrib (#8372)
b29f3df Update dependency com.google.api.grpc:proto-google-common-protos to v2.71.0 (...
Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-api from 1.61.0 to 1.62.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.62.0

API

Context

Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

Avoid parentContext allocation on span start for the common case (#8332)

Metrics

Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)

Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)

BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)

OTLP: Fix null input handling in StringEncoder (#8312)

OTLP: Align proto field types and wire tag names in marshalers (#8293)

OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)

OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)

OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)

OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)

Extensions

BREAKING Declarative config: Extract to new opentelemetry-sdk-extension-declarative-config artifact with new package io.opentelemetry.sdk.autoconfigure.declarativeconfig (#8265)

Autoconfigure: Add file size validation in OtlpConfigUtil to avoid unsafe cast to int (#8287)

Declarative config: Fix collection fields to not be initialized to empty by default (#8356)

Incubator: Add EventToSpanEventBridge to bridge log-based events to span events (#8372)

Testing

Add @Nullable to equalTo value argument in OpenTelemetryAssertions (#8301)

Add hasValueSatisfying to LongPointAssert and DoublePointAssert for fuzzy value matching (#8328)

Add containsPointsSatisfying to metric data asserts for "each given assertion must be satisfied by at least one point, extras allowed" checks on sum, gauge, histogram, exponential histogram, and summary data (#8329)

Project tooling

Add initial OSGi support (#7964)

Promote ApiUsageLogger to opentelemetry-common public API (#8318)

Establish exception logging guidelines and fix inconsistent patterns across exporters and SDK (#8231)

Add *.impl.* package naming convention for internal code with japicmp compatibility (#8325)

Add Sonatype dependency audit to build (#8365)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.62.0 (2026-05-08)

API

Context

Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

Avoid parentContext allocation on span start for the common case (#8332)

Metrics

Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)

Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)

BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)

OTLP: Fix null input handling in StringEncoder (#8312)

OTLP: Align proto field types and wire tag names in marshalers (#8293)

OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)

OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)

OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)

OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)

Extensions

BREAKING Declarative config: Extract to new opentelemetry-sdk-extension-declarative-config artifact with new package io.opentelemetry.sdk.autoconfigure.declarativeconfig (#8265)

Autoconfigure: Add file size validation in OtlpConfigUtil to avoid unsafe cast to int (#8287)

... (truncated)

Commits

d03621f [release/v1.62.x] Prepare release 1.62.0 (#8385)
3a62b7a Prepare 1.62.0 (#8378)
893910b docs: Expand SIG meeting welcoming language (#8383)
03837d3 Apply baggage limits (#8380)
cdadad6 Update dependency org.osgi:org.osgi.test.bom to v1.3.0 (#8376)
8e0f196 Update error-prone monorepo to v2.49.0 (#8259)
2923430 Add initial OSGi support (#7964)
3f3780c Add guidance for null checking, promote ApiUsageLogger to opentelemetry-commo...
e224e19 Port event span event bridge from contrib (#8372)
b29f3df Update dependency com.google.api.grpc:proto-google-common-protos to v2.71.0 (...
Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk-testing from 1.61.0 to 1.62.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk-testing's releases.

Version 1.62.0

API

Context

Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

Avoid parentContext allocation on span start for the common case (#8332)

Metrics

Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)

Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)

BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)

OTLP: Fix null input handling in StringEncoder (#8312)

OTLP: Align proto field types and wire tag names in marshalers (#8293)

OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)

OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)

OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)

OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)

Extensions

BREAKING Declarative config: Extract to new opentelemetry-sdk-extension-declarative-config artifact with new package io.opentelemetry.sdk.autoconfigure.declarativeconfig (#8265)

Autoconfigure: Add file size validation in OtlpConfigUtil to avoid unsafe cast to int (#8287)

Declarative config: Fix collection fields to not be initialized to empty by default (#8356)

Incubator: Add EventToSpanEventBridge to bridge log-based events to span events (#8372)

Testing

Add @Nullable to equalTo value argument in OpenTelemetryAssertions (#8301)

Add hasValueSatisfying to LongPointAssert and DoublePointAssert for fuzzy value matching (#8328)

Add containsPointsSatisfying to metric data asserts for "each given assertion must be satisfied by at least one point, extras allowed" checks on sum, gauge, histogram, exponential histogram, and summary data (#8329)

Project tooling

Add initial OSGi support (#7964)

Promote ApiUsageLogger to opentelemetry-common public API (#8318)

Establish exception logging guidelines and fix inconsistent patterns across exporters and SDK (#8231)

Add *.impl.* package naming convention for internal code with japicmp compatibility (#8325)

Add Sonatype dependency audit to build (#8365)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk-testing's changelog.

Version 1.62.0 (2026-05-08)

API

Context

Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

Avoid parentContext allocation on span start for the common case (#8332)

Metrics

Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)

Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)

BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)

OTLP: Fix null input handling in StringEncoder (#8312)

OTLP: Align proto field types and wire tag names in marshalers (#8293)

OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)

OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)

OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)

OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)

Extensions

BREAKING Declarative config: Extract to new opentelemetry-sdk-extension-declarative-config artifact with new package io.opentelemetry.sdk.autoconfigure.declarativeconfig (#8265)

Autoconfigure: Add file size validation in OtlpConfigUtil to avoid unsafe cast to int (#8287)

... (truncated)

Commits

d03621f [release/v1.62.x] Prepare release 1.62.0 (#8385)
3a62b7a Prepare 1.62.0 (#8378)
893910b docs: Expand SIG meeting welcoming language (#8383)
03837d3 Apply baggage limits (#8380)
cdadad6 Update dependency org.osgi:org.osgi.test.bom to v1.3.0 (#8376)
8e0f196 Update error-prone monorepo to v2.49.0 (#8259)
2923430 Add initial OSGi support (#7964)
3f3780c Add guidance for null checking, promote ApiUsageLogger to opentelemetry-commo...
e224e19 Port event span event bridge from contrib (#8372)
b29f3df Update dependency com.google.api.grpc:proto-google-common-protos to v2.71.0 (...
Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-api from 1.61.0 to 1.62.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.62.0

API

Context

Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

Avoid parentContext allocation on span start for the common case (#8332)

Metrics

Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)

Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)

BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)

OTLP: Fix null input handling in StringEncoder (#8312)

OTLP: Align proto field types and wire tag names in marshalers (#8293)

OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)

OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)

OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)

OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)

Extensions

BREAKING Declarative config: Extract to new opentelemetry-sdk-extension-declarative-config artifact with new package io.opentelemetry.sdk.autoconfigure.declarativeconfig (#8265)

Autoconfigure: Add file size validation in OtlpConfigUtil to avoid unsafe cast to int (#8287)

Declarative config: Fix collection fields to not be initialized to empty by default (#8356)

Incubator: Add EventToSpanEventBridge to bridge log-based events to span events (#8372)

Testing

Add @Nullable to equalTo value argument in OpenTelemetryAssertions (#8301)

Add hasValueSatisfying to LongPointAssert and DoublePointAssert for fuzzy value matching (#8328)

Add containsPointsSatisfying to metric data asserts for "each given assertion must be satisfied by at least one point, extras allowed" checks on sum, gauge, histogram, exponential histogram, and summary data (#8329)

Project tooling

Add initial OSGi support (#7964)

Promote ApiUsageLogger to opentelemetry-common public API (#8318)

Establish exception logging guidelines and fix inconsistent patterns across exporters and SDK (#8231)

Add *.impl.* package naming convention for internal code with japicmp compatibility (#8325)

Add Sonatype dependency audit to build (#8365)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.62.0 (2026-05-08)

API

Context

Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

Avoid parentContext allocation on span start for the common case (#8332)

Metrics

Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)

Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)

BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)

OTLP: Fix null input handling in StringEncoder (#8312)

OTLP: Align proto field types and wire tag names in marshalers (#8293)

OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)

OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)

OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)

OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)
...
Description has been truncated

Bumps the gradle group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | org.apache.logging.log4j:log4j-api | `2.25.4` | `2.26.0` | | org.apache.logging.log4j:log4j-core | `2.25.4` | `2.26.0` | | org.slf4j:slf4j-api | `2.0.17` | `2.0.18` | | [io.netty:netty-all](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.14.Final` | | [software.amazon.api.models:s3](https://github.com/aws/api-models-aws) | `1.0.17` | `1.0.18` | | org.slf4j:slf4j-simple | `2.0.17` | `2.0.18` | | [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` | | software.amazon.awssdk:retries-spi | `2.44.2` | `2.44.11` | | software.amazon.awssdk:retries | `2.44.2` | `2.44.11` | | software.amazon.awssdk:sdk-core | `2.44.2` | `2.44.11` | | software.amazon.awssdk:auth | `2.44.2` | `2.44.11` | | [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java) | `1.61.0` | `1.62.0` | | [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.61.0` | `1.62.0` | | [io.opentelemetry:opentelemetry-sdk-testing](https://github.com/open-telemetry/opentelemetry-java) | `1.61.0` | `1.62.0` | | [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` | | [software.amazon.api.models:all](https://github.com/aws/api-models-aws) | `1.0.226` | `1.0.235` | | [com.diffplug.spotless:spotless-plugin-gradle](https://github.com/diffplug/spotless) | `8.4.0` | `8.5.1` | | [com.autonomousapps:dependency-analysis-gradle-plugin](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin) | `3.10.0` | `3.13.0` | Updates `org.apache.logging.log4j:log4j-api` from 2.25.4 to 2.26.0 Updates `org.apache.logging.log4j:log4j-core` from 2.25.4 to 2.26.0 Updates `org.slf4j:slf4j-api` from 2.0.17 to 2.0.18 Updates `org.apache.logging.log4j:log4j-core` from 2.25.4 to 2.26.0 Updates `io.netty:netty-all` from 4.2.13.Final to 4.2.14.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.13.Final...netty-4.2.14.Final) Updates `software.amazon.api.models:s3` from 1.0.17 to 1.0.18 - [Commits](https://github.com/aws/api-models-aws/commits) Updates `software.amazon.api.models:lambda` from 1.0.17 to 1.0.18 Updates `org.slf4j:slf4j-simple` from 2.0.17 to 2.0.18 Updates `org.junit.jupiter:junit-jupiter` from 6.0.3 to 6.1.0 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.0.3...r6.1.0) Updates `software.amazon.awssdk:retries-spi` from 2.44.2 to 2.44.11 Updates `software.amazon.awssdk:retries` from 2.44.2 to 2.44.11 Updates `software.amazon.awssdk:sdk-core` from 2.44.2 to 2.44.11 Updates `software.amazon.awssdk:auth` from 2.44.2 to 2.44.11 Updates `software.amazon.awssdk:retries` from 2.44.2 to 2.44.11 Updates `software.amazon.awssdk:sdk-core` from 2.44.2 to 2.44.11 Updates `software.amazon.awssdk:auth` from 2.44.2 to 2.44.11 Updates `io.opentelemetry:opentelemetry-bom` from 1.61.0 to 1.62.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-java@v1.61.0...v1.62.0) Updates `io.opentelemetry:opentelemetry-api` from 1.61.0 to 1.62.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-java@v1.61.0...v1.62.0) Updates `io.opentelemetry:opentelemetry-sdk-testing` from 1.61.0 to 1.62.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-java@v1.61.0...v1.62.0) Updates `io.opentelemetry:opentelemetry-api` from 1.61.0 to 1.62.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-java@v1.61.0...v1.62.0) Updates `io.opentelemetry:opentelemetry-sdk-testing` from 1.61.0 to 1.62.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-java@v1.61.0...v1.62.0) Updates `org.junit:junit-bom` from 6.0.3 to 6.1.0 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.0.3...r6.1.0) Updates `software.amazon.api.models:all` from 1.0.226 to 1.0.235 - [Commits](https://github.com/aws/api-models-aws/commits) Updates `com.diffplug.spotless:spotless-plugin-gradle` from 8.4.0 to 8.5.1 - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](diffplug/spotless@gradle/8.4.0...gradle/8.5.1) Updates `com.autonomousapps:dependency-analysis-gradle-plugin` from 3.10.0 to 3.13.0 - [Changelog](https://github.com/autonomousapps/dependency-analysis-gradle-plugin/blob/main/CHANGELOG.md) - [Commits](autonomousapps/dependency-analysis-gradle-plugin@v3.10.0...v3.13.0) --- updated-dependencies: - dependency-name: org.apache.logging.log4j:log4j-api dependency-version: 2.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle - dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle - dependency-name: org.slf4j:slf4j-api dependency-version: 2.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle - dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle - dependency-name: io.netty:netty-all dependency-version: 4.2.14.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle - dependency-name: software.amazon.api.models:s3 dependency-version: 1.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle - dependency-name: software.amazon.api.models:lambda dependency-version: 1.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle - dependency-name: org.slf4j:slf4j-simple dependency-version: 2.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle - dependency-name: org.junit.jupiter:junit-jupiter dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle - dependency-name: software.amazon.awssdk:retries-spi dependency-version: 2.44.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle - dependency-name: software.amazon.awssdk:retries dependency-version: 2.44.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle - dependency-name: software.amazon.awssdk:sdk-core dependency-version: 2.44.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle - dependency-name: software.amazon.awssdk:auth dependency-version: 2.44.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle - dependency-name: software.amazon.awssdk:retries dependency-version: 2.44.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle - dependency-name: software.amazon.awssdk:sdk-core dependency-version: 2.44.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle - dependency-name: software.amazon.awssdk:auth dependency-version: 2.44.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle - dependency-name: io.opentelemetry:opentelemetry-bom dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle - dependency-name: io.opentelemetry:opentelemetry-api dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle - dependency-name: io.opentelemetry:opentelemetry-sdk-testing dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle - dependency-name: io.opentelemetry:opentelemetry-api dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle - dependency-name: io.opentelemetry:opentelemetry-sdk-testing dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle - dependency-name: org.junit:junit-bom dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle - dependency-name: software.amazon.api.models:all dependency-version: 1.0.235 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle - dependency-name: com.diffplug.spotless:spotless-plugin-gradle dependency-version: 8.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle - dependency-name: com.autonomousapps:dependency-analysis-gradle-plugin dependency-version: 3.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 22, 2026

github-actions Bot approved these changes May 22, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the gradle group across 1 directory with 19 updates#1204

Bump the gradle group across 1 directory with 19 updates#1204
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-67b66782ea

dependabot Bot commented on behalf of github May 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 22, 2026

netty-4.2.14.Final

What's Changed

New Contributors

New Contributors

New Contributors

New Contributors

Version 1.62.0

API

Context

SDK

Traces

Metrics

Exporters

Extensions

Testing

Project tooling

Version 1.62.0 (2026-05-08)

API

Context

SDK

Traces

Metrics

Exporters

Extensions

Version 1.62.0

API

Context

SDK

Traces

Metrics

Exporters

Extensions

Testing

Project tooling

Version 1.62.0 (2026-05-08)

API

Context

SDK

Traces

Metrics

Exporters

Extensions

Version 1.62.0

API

Context

SDK

Traces

Metrics

Exporters

Extensions

Testing

Project tooling

Version 1.62.0 (2026-05-08)

API

Context

SDK

Traces

Metrics

Exporters

Extensions

Version 1.62.0

API

Context

SDK

Traces

Metrics

Exporters

Extensions

Testing

Project tooling

Version 1.62.0 (2026-05-08)

API

Context

SDK

Traces

Metrics

Exporters

Uh oh!