Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CORE-69: minor patch deps no spring boot #207

Merged
merged 2 commits into from
Nov 15, 2024
Merged

CORE-69: minor patch deps no spring boot #207

merged 2 commits into from
Nov 15, 2024

Conversation

davidangb
Copy link
Contributor

@davidangb davidangb commented Nov 14, 2024 •
edited
Loading

A branch off of #206 that includes all its updates except the Spring Boot update.

Description copied from #206, with Spring Boot and mention of Dependabot commands removed:

Bumps the minor-patch-dependencies group with 9 updates in the / directory:

Package From To
org.bouncycastle:bcprov-jdk18on 1.78.1 1.79
com.google.cloud:libraries-bom 26.47.0 26.50.0
bio.terra:stairway-gcp 1.1.13-SNAPSHOT 1.1.15-SNAPSHOT
bio.terra:stairway-azure 1.1.13-SNAPSHOT 1.1.15-SNAPSHOT
io.opentelemetry:opentelemetry-bom-alpha 1.42.1-alpha 1.44.1-alpha
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom 2.8.0 2.10.0
com.google.cloud.opentelemetry:exporter-trace 0.32.0 0.33.0
com.google.cloud.opentelemetry:exporter-metrics 0.32.0 0.33.0

Updates org.bouncycastle:bcprov-jdk18on from 1.78.1 to 1.79

Changelog

Sourced from org.bouncycastle:bcprov-jdk18on's changelog.

2.1.1 Version Release: 1.80 Date:      TBD.

2.2.1 Version Release: 1.79 Date:      2024, 30th October.

... (truncated)

Commits

Updates com.google.cloud:libraries-bom from 26.47.0 to 26.50.0

Release notes

Sourced from com.google.cloud:libraries-bom's releases.

v26.50.0

GCP Libraries BOM 26.50.0

Here are the differences from the previous version (26.49.0)

The group ID of the following artifacts is com.google.cloud.

Notable Changes

Protobuf-Java v4.28.3

This version of Libraries-Bom is upgrading the Protobuf Java (PBJ) Runtime version to v4.28.3. The Java SDK aims to use the latest Protobuf version to utilize the latest stable features and to mitigate vulnerabilities (CVEs).

Potential PBJ Runtime 4.28.3 Upgrade Issues

There are a few potential compatibility issues that may arise for users following the PBJ Runtime upgrade to v4.28.3. Details about these potential issues are outlined below.

Note: The following issues may not be exhaustive and users may encounter additional issues.

Source Compatibility Issues

PBJ 4.26.x removed some methods from runtime. Users may see source compilation issues when compiling their application. If you do not use any of the following removed methods, you should not see these issues.

... (truncated)

Commits
  • 23ace8b chore: release main (#6817)
  • 88b0c80 deps: update dependency com.google.cloud:google-cloud-pubsublite-bom to v1.14...
  • 5662b26 chore: Override the version of protobuf-bom to 4.28.3 in libraries-bom. (#6836)
  • 2c49bcf deps: update dependency com.google.cloud:google-cloud-nio to v0.127.26 (#6835)
  • 9cc59ba deps: update dependency com.google.cloud:google-cloud-bigtable-bom to v2.46.0...
  • 2d2b829 deps: update dependency com.google.cloud:google-cloud-firestore-bom to v3.28....
  • 39c5c2f deps: update dependency com.google.cloud:google-cloud-bigquerystorage-bom to ...
  • 476cc06 deps: update dependency com.google.cloud:google-cloud-logging-logback to v0.1...
  • d02b9b5 deps: update dependency com.google.cloud:google-cloud-pubsub-bom to v1.134.1 ...
  • 0401269 deps: update dependency com.google.cloud:google-cloud-spanner-bom to v6.80.1 ...
  • Additional commits viewable in compare view

Updates bio.terra:stairway-gcp from 1.1.13-SNAPSHOT to 1.1.15-SNAPSHOT

Updates bio.terra:stairway-azure from 1.1.13-SNAPSHOT to 1.1.15-SNAPSHOT

Updates bio.terra:stairway-azure from 1.1.13-SNAPSHOT to 1.1.15-SNAPSHOT

Updates io.opentelemetry:opentelemetry-bom-alpha from 1.42.1-alpha to 1.44.1-alpha

Release notes

Sourced from io.opentelemetry:opentelemetry-bom-alpha's releases.

Version 1.44.0

API

  • Fix ConfigUtil#getString ConcurrentModificationException (#6841)

SDK

Traces

  • Stabilize ExceptionEventData (#6795)

Metrics

  • Stabilize metric cardinality limits (#6794)
  • Refactor metrics internals to remove MeterSharedState (#6845)

Exporters

  • Add memory mode option to stdout exporters (#6774)
  • Log a warning if OTLP endpoint port is likely incorrect given the protocol (#6813)
  • Fix OTLP gRPC retry mechanism for unsuccessful HTTP responses (#6829)
  • Add ByteBuffer field type marshaling support (#6686)
  • Fix stdout exporter format by adding newline after each export (#6848)
  • Enable reusuable_data memory mode by default for OtlpGrpc{Signal}Exporter, OtlpHttp{Signal}Exporter, OtlpStdout{Signal}Exporter, and PrometheusHttpServer (#6799)

Extension

  • Rebrand file configuration to declarative configuration in documentation (#6812)
  • Fix declarative config file_format validation (#6786)
  • Fix declarative config env substitution by disallowing '}' in default value (#6793)
  • Set declarative config default OTLP protocol to http/protobuf (#6800)
  • Stabilize autoconfigure disabling of resource keys via otel.resource.disabled.keys (#6809)

Tooling

  • Run tests on Java 23 (#6825)
  • Test Windows in CI (#6824)
  • Add error prone checks for internal javadoc and private constructors (#6844)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​breedx-splk @​cyrille-leclerc @​hboutemy @​jack-berg @​jaydeluca @​jhalliday @​JiwonKKang

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-bom-alpha's changelog.

Changelog

Unreleased

Version 1.44.1 (2024-11-10)

SDK

Traces

  • Fix regression in event attributes (#6865)

Version 1.44.0 (2024-11-08)

API

  • Fix ConfigUtil#getString ConcurrentModificationException (#6841)

SDK

Traces

  • Stabilize ExceptionEventData (#6795)

Metrics

  • Stabilize metric cardinality limits (#6794)
  • Refactor metrics internals to remove MeterSharedState (#6845)

Exporters

  • Add memory mode option to stdout exporters (#6774)
  • Log a warning if OTLP endpoint port is likely incorrect given the protocol (#6813)
  • Fix OTLP gRPC retry mechanism for unsuccessful HTTP responses (#6829)
  • Add ByteBuffer field type marshaling support (#6686)
  • Fix stdout exporter format by adding newline after each export (#6848)
  • Enable reusuable_data memory mode by default for OtlpGrpc{Signal}Exporter, OtlpHttp{Signal}Exporter, OtlpStdout{Signal}Exporter, and PrometheusHttpServer (#6799)

... (truncated)

Commits

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom from 2.8.0 to 2.10.0

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom's releases.

Version 2.10.0

This release targets the OpenTelemetry SDK 1.44.1.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

🌟 New javaagent instrumentation

  • Ktor 3 instrumentation (#12562)

🌟 New library instrumentation

  • Ktor 3 instrumentation (#12562)

Migration notes

  • Spring Boot Starter Scheduling instrumentation scope name changed from io.opentelemetry.spring-scheduling-3.1 to io.opentelemetry.spring-boot-autoconfigure to reflect the module's name.
  • Default flush timeout for aws lambda javaagent instrumentation changed from 1 second to 10 seconds to match the flush timeout used in the aws lambda library instrumentation. (#12576)

📈 Enhancements

  • Delegate loading of java package to platform loader (#12505)
  • Set up virtual field transforms before otel sdk is initialized (#12444)
  • Update azure-core-tracing-opentelemetry version and improve HTTP suppression to back off when Azure SDK tracing is disabled. (#12489)
  • Ktor2 http client uses low level instrumentation (#12530)
  • Add logback mdc instrumentation to spring boot starter (#12515)
  • Run class load listener only once (#12565)
  • Remove duplicate byte buddy classes to reduce agent jar file size (#12571)
  • Support additional JVM arg syntax in service name resource detector (#12544)

🛠️ Bug fixes

  • Fix derby directory connection string parser (#12479)
  • Improve whitespace handling in oracle jdbc url parser (#12512)
  • Fix SpanKey bridging for unbridgeable span (#12511)
  • Fix lettuce instrumentation and tests to pass against latest version (#12552)
  • Fix Kafka initialization occasionally failed due to concurrent injection of OpenTelemetryMetricsReporter (#12583)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​AntonioLyubchev @​breedx-splk @​brunobat @​Cirilla-zmh @​e5l @​greatvovan @​heyams @​jaydeluca @​jeanbisutti

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom's changelog.

Version 2.10.0 (2024-11-13)

🌟 New javaagent instrumentation

  • Ktor 3 instrumentation (#12562)

🌟 New library instrumentation

  • Ktor 3 instrumentation (#12562)

Migration notes

  • Spring Boot Starter Scheduling instrumentation scope name changed from io.opentelemetry.spring-scheduling-3.1 to io.opentelemetry.spring-boot-autoconfigure to reflect the module's name.
  • Default flush timeout for aws lambda javaagent instrumentation changed from 1 second to 10 seconds to match the flush timeout used in the aws lambda library instrumentation. (#12576)

📈 Enhancements

  • Delegate loading of java package to platform loader (#12505)
  • Set up virtual field transforms before otel sdk is initialized (#12444)
  • Update azure-core-tracing-opentelemetry version and improve HTTP suppression to back off when Azure SDK tracing is disabled. (#12489)
  • Ktor2 http client uses low level instrumentation (#12530)
  • Add logback mdc instrumentation to spring boot starter (#12515)
  • Run class load listener only once (#12565)
  • Remove duplicate byte buddy classes to reduce agent jar file size (#12571)
  • Support additional JVM arg syntax in service name resource detector (#12544)

🛠️ Bug fixes

  • Fix derby directory connection string parser (#12479)
  • Improve whitespace handling in oracle jdbc url parser (#12512)
  • Fix SpanKey bridging for unbridgeable span (#12511)
  • Fix lettuce instrumentation and tests to pass against latest version

... (truncated)

Commits

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha from 2.8.0-alpha to 2.10.0-alpha

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's releases.

Version 2.9.0

This release targets the OpenTelemetry SDK 1.43.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

📈 Enhancements

  • Allow JMX Insight reuse for remote connections (#12178)
  • Add opentelemetry-semconv-incubating to bom-alpha (#12266)
  • Bridge more incubating api (#12230)
  • Jetty HttpClient 12: propagate context to all response listeners (#12326)
  • Add Pekko Scheduler context propagation (#12359)
  • Add Akka Scheduler context propagation (#12373)
  • Add instrumentation for spring-cloud-aws SqsListener annotation (#12314)
  • Align SpringConfigProperties with DefaultConfigProperties (#12398)
  • Clear context propagation virtual field (#12397)
  • The opt-in experimental attribute aws.requestId was renamed to aws.request_id (to match the semantic conventions) and it is now emitted by default. (#12352)
  • Ability to set Logback argument capture with a property in Spring Boot Starter (#12442)
  • Support experimental declarative configuration (#12265)
  • Spring Boot Starter: Add auto configuration for spring scheduling instrumentation (#12438)
  • Extract APIGatewayProxyRequestEvent headers for context propagation in AWS Lambda instrumentation (#12440)
  • Support JMX state metrics (#12369)
  • Allow method instrumentation module to trace methods in boot loader (#12454)

🛠️ Bug fixes

  • Fix gc duration metric in runtime-telemetry-java17 (#12256)
  • Fix vert.x route containing duplicate segments when RoutingContext.next is used (#12260)
  • Fixes for latest mongo version (#12331)
  • Fix context propagation for ratpack request body stream (#12330)
  • Fix lambda instrumentation to forceFlush logs also (#12341)
  • Can't add custom AttributeExtractor to Apache HttpClient 5 library instrumentation (#12394)
  • Disable logback capture arguments by default (#12445)
  • Add support for missing list properties in spring starter (#12434)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​aarrsseni @​AntonioLyubchev @​breedx-splk @​brunobat @​cleverchuk @​Dimagreg @​dubek @​egahlin @​encodedrose @​fabiolnh @​heyams

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's changelog.

Changelog

Unreleased

Version 2.10.0 (2024-11-13)

🌟 New javaagent instrumentation

  • Ktor 3 instrumentation (#12562)

🌟 New library instrumentation

  • Ktor 3 instrumentation (#12562)

Migration notes

  • Spring Boot Starter Scheduling instrumentation scope name changed from io.opentelemetry.spring-scheduling-3.1 to io.opentelemetry.spring-boot-autoconfigure to reflect the module's name.
  • Default flush timeout for aws lambda javaagent instrumentation changed from 1 second to 10 seconds to match the flush timeout used in the aws lambda library instrumentation. (#12576)

📈 Enhancements

  • Delegate loading of java package to platform loader (#12505)
  • Set up virtual field transforms before otel sdk is initialized (#12444)
  • Update azure-core-tracing-opentelemetry version and improve HTTP suppression to back off when Azure SDK tracing is disabled. (#12489)
  • Ktor2 http client uses low level instrumentation (#12530)
  • Add logback mdc instrumentation to spring boot starter (#12515)
  • Run class load listener only once (#12565)
  • Remove duplicate byte buddy classes to reduce agent jar file size (#12571)
  • Support additional JVM arg syntax in service name resource detector (#12544)

🛠️ Bug fixes

  • Fix derby directory connection string parser (#12479)
  • Improve whitespace handling in oracle jdbc url parser

... (truncated)

Commits

Updates com.google.cloud.opentelemetry:exporter-trace from 0.32.0 to 0.33.0

Release notes

Sourced from com.google.cloud.opentelemetry:exporter-trace's releases.

v0.33.0

Release Highlights

  • Update the OpenTelemetry and Google library dependencies to address a reported CVE.

What's Changed

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-java@v0.32.0...v0.33.0

Commits

Updates com.google.cloud.opentelemetry:exporter-metrics from 0.32.0 to 0.33.0

Release notes

Sourced from com.google.cloud.opentelemetry:exporter-metrics's releases.

v0.33.0

Release Highlights

  • Update the OpenTelemetry and Google library dependencies to address a reported CVE.

What's Changed

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-java@v0.32.0...v0.33.0

Commits

dependabot bot and others added 2 commits November 14, 2024 17:21
@dependabot
[PF-2983]: Bump the minor-patch-dependencies group across 1 directory…
15dff7f 
… with 10 updates

Bumps the minor-patch-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.78.1` | `1.79` |
| [com.google.cloud:libraries-bom](https://github.com/googleapis/java-cloud-bom) | `26.47.0` | `26.50.0` |
| bio.terra:stairway-gcp | `1.1.13-SNAPSHOT` | `1.1.15-SNAPSHOT` |
| bio.terra:stairway-azure | `1.1.13-SNAPSHOT` | `1.1.15-SNAPSHOT` |
| [io.opentelemetry:opentelemetry-bom-alpha](https://github.com/open-telemetry/opentelemetry-java) | `1.42.1-alpha` | `1.44.1-alpha` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.8.0` | `2.10.0` |
| [com.google.cloud.opentelemetry:exporter-trace](https://github.com/GoogleCloudPlatform/opentelemetry-operations-java) | `0.32.0` | `0.33.0` |
| [com.google.cloud.opentelemetry:exporter-metrics](https://github.com/GoogleCloudPlatform/opentelemetry-operations-java) | `0.32.0` | `0.33.0` |
| [org.springframework.boot](https://github.com/spring-projects/spring-boot) | `3.3.4` | `3.3.5` |



Updates `org.bouncycastle:bcprov-jdk18on` from 1.78.1 to 1.79
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `com.google.cloud:libraries-bom` from 26.47.0 to 26.50.0
- [Release notes](https://github.com/googleapis/java-cloud-bom/releases)
- [Changelog](https://github.com/googleapis/java-cloud-bom/blob/main/release-please-config.json)
- [Commits](googleapis/java-cloud-bom@v26.47.0...v26.50.0)

Updates `bio.terra:stairway-gcp` from 1.1.13-SNAPSHOT to 1.1.15-SNAPSHOT

Updates `bio.terra:stairway-azure` from 1.1.13-SNAPSHOT to 1.1.15-SNAPSHOT

Updates `bio.terra:stairway-azure` from 1.1.13-SNAPSHOT to 1.1.15-SNAPSHOT

Updates `io.opentelemetry:opentelemetry-bom-alpha` from 1.42.1-alpha to 1.44.1-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java/commits)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom` from 2.8.0 to 2.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java-instrumentation@v2.8.0...v2.10.0)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha` from 2.8.0-alpha to 2.10.0-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits)

Updates `com.google.cloud.opentelemetry:exporter-trace` from 0.32.0 to 0.33.0
- [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-java/releases)
- [Commits](GoogleCloudPlatform/opentelemetry-operations-java@v0.32.0...v0.33.0)

Updates `com.google.cloud.opentelemetry:exporter-metrics` from 0.32.0 to 0.33.0
- [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-java/releases)
- [Commits](GoogleCloudPlatform/opentelemetry-operations-java@v0.32.0...v0.33.0)

Updates `org.springframework.boot` from 3.3.4 to 3.3.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.3.4...v3.3.5)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: com.google.cloud:libraries-bom
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: bio.terra:stairway-gcp
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: bio.terra:stairway-azure
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: bio.terra:stairway-azure
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: io.opentelemetry:opentelemetry-bom-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: com.google.cloud.opentelemetry:exporter-trace
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: com.google.cloud.opentelemetry:exporter-metrics
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: org.springframework.boot
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@davidangb
dont upgrade Spring Boot yet
115a64b
@sonarqubecloud SonarQubeCloud
Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@davidangb davidangb mentioned this pull request Nov 14, 2024
Closed
@davidangb davidangb merged commit ef0444a into develop Nov 15, 2024
2 checks passed
@davidangb davidangb deleted the da_CORE-69_minor-patch-deps-no-spring-boot branch November 15, 2024 20:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@dvoet dvoet dvoet approved these changes

@calypsomatic calypsomatic calypsomatic approved these changes

@pshapiro4broad pshapiro4broad Awaiting requested review from pshapiro4broad

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@davidangb @dvoet @calypsomatic