Skip to content

chore(deps): bump the dependencies group with 3 updates - #364

Merged
curfew-marathon merged 2 commits into
mainfrom
dependabot/gradle/dependencies-379413a931
Aug 1, 2026
Merged

chore(deps): bump the dependencies group with 3 updates#364
curfew-marathon merged 2 commits into
mainfrom
dependabot/gradle/dependencies-379413a931

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 3 updates: com.fasterxml.jackson:jackson-bom, org.openapitools:jackson-databind-nullable and io.opentelemetry:opentelemetry-bom.

Updates com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1

Commits
  • b749a0c [maven-release-plugin] prepare release jackson-bom-2.22.1
  • 569073f Prep for 2.22.1 release
  • 87627b1 Merge branch '2.21' into 2.22
  • da540ae Post-release dep version bump
  • 5f0462e [maven-release-plugin] prepare for next development iteration
  • 252ea90 [maven-release-plugin] prepare release jackson-bom-2.21.5
  • 0bbea7f Prep for 2.21.5 release
  • f6c940d Post-release dep version bump
  • 31cfc40 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.openapitools:jackson-databind-nullable from 0.2.10 to 0.2.11

Release notes

Sourced from org.openapitools:jackson-databind-nullable's releases.

v0.2.11 released

What's Changed

New Contributors

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.10...v0.2.11

Commits
  • aa1ca23 0.2.11 release (#168)
  • 259d2b6 Bump com.fasterxml.jackson.core:jackson-databind (#167)
  • 30407d4 Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 (#166)
  • 3ebb0b1 Bump com.fasterxml.jackson.core:jackson-databind (#163)
  • 05b915e Bump actions/setup-java from 5.5.0 to 5.6.0 (#164)
  • 030530a Bump actions/checkout from 7.0.0 to 7.0.1 (#165)
  • e521d45 Bump tools.jackson:jackson-bom from 3.2.0 to 3.2.1 (#162)
  • 07698be Bump com.fasterxml.jackson.core:jackson-databind (#161)
  • 8150e07 Bump actions/setup-java from 5.3.0 to 5.5.0 (#160)
  • eff23fb Bump com.fasterxml.jackson:jackson-base from 2.22.0 to 2.22.1 (#159)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-bom from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-bom's releases.

Version 1.64.0

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

  • BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
  • OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
  • OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
  • OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
  • Prometheus: Add translation strategy support (#8346)
  • Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

  • BREAKING Declarative config: Move experimental types to internal package (#8530)
  • Declarative config: Commit generated schema POJOs to git (#8408)
  • Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
  • Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
  • Declarative config: Add ref descriptions to generated model classes (#8540)
  • Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
  • Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-bom's changelog.

Version 1.64.0 (2026-07-10)

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits
  • fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
  • 0260567 Prepare 1.64.0 (#8582)
  • 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
  • 0004c7e Use shared workflow failure issue (#8581)
  • 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
  • e29f345 Remove duplicate declarative config resolver (#8579)
  • 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
  • 91cbb32 Update otelbot token workflows to use client IDs (#8580)
  • 38dfb98 Update fossas/fossa-action action to v2 (#8577)
  • d79e509 Update weekly update (#8576)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 3 updates: [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom), [org.openapitools:jackson-databind-nullable](https://github.com/OpenAPITools/jackson-databind-nullable) and [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java).


Updates `com.fasterxml.jackson:jackson-bom` from 2.22.0 to 2.22.1
- [Commits](FasterXML/jackson-bom@jackson-bom-2.22.0...jackson-bom-2.22.1)

Updates `org.openapitools:jackson-databind-nullable` from 0.2.10 to 0.2.11
- [Release notes](https://github.com/OpenAPITools/jackson-databind-nullable/releases)
- [Commits](OpenAPITools/jackson-databind-nullable@v0.2.10...v0.2.11)

Updates `io.opentelemetry:opentelemetry-bom` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.63.0...v1.64.0)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.openapitools:jackson-databind-nullable
  dependency-version: 0.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-bom
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 1, 2026 05:42
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 1, 2026
@curfew-marathon
curfew-marathon added this pull request to the merge queue Aug 1, 2026
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 38.67%. Comparing base (66347b5) to head (110e7c5).

❌ Your project status has failed because the head coverage (38.67%) is below the target coverage (80.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files
@@            Coverage Diff            @@
##               main     #364   +/-   ##
=========================================
  Coverage     38.67%   38.67%           
  Complexity     1289     1289           
=========================================
  Files           198      198           
  Lines          7707     7707           
  Branches        900      900           
=========================================
  Hits           2981     2981           
  Misses         4579     4579           
  Partials        147      147           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Merged via the queue into main with commit d17756c Aug 1, 2026
24 of 27 checks passed
@curfew-marathon
curfew-marathon deleted the dependabot/gradle/dependencies-379413a931 branch August 1, 2026 22:25
@dosubot

dosubot Bot commented Aug 1, 2026

Copy link
Copy Markdown

📄 Knowledge review

Dosu skipped reviewing this PR because your organization has used its 200 included credits for the month. Your usage will reset on 2026-09-01. To have Dosu review this PR before then, ask your organization admin to upgrade to a pro account.


Leave Feedback Ask Dosu about java-sdk Add Dosu to your team

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants