DenktMit-OSS/lt-logging
0
1
Fork 0
Code Issues Pull requests 1 Projects Releases 10 Packages Wiki Activity Actions

fix(deps): update all dependencies #9

Open
renovate-bot wants to merge 1 commit from renovate/all into main
pull from: renovate/all
merge into: DenktMit-OSS:main
Conversation 0 Commits 1 Files changed 3 +6 -6
renovate-bot commented 2026-07-22 01:07:55 +00:00
Member
Copy link

This PR contains the following updates:

Package Type Update Change Age Confidence
https://github.com/actions/setup-java action major v5 → v6 age confidence
org.junit.jupiter:junit-jupiter (source) test patch 6.1.2 → 6.1.3 age confidence
com.squareup.okhttp3:okhttp-bom (source) import minor 5.4.0 → 5.5.0 age confidence
org.springframework.boot:spring-boot-dependencies (source) import patch 4.1.0 → 4.1.1 age confidence
io.opentelemetry:opentelemetry-bom import minor 1.64.0 → 1.66.0 age confidence

Release Notes

actions/setup-java (https://github.com/actions/setup-java)

v6.0.1

Compare Source

What's Changed
New Contributors

Full Changelog: https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1

v6.0.0

Compare Source

What's Changed
New Contributors

Full Changelog: https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0

lysine-dev/okhttp (com.squareup.okhttp3:okhttp-bom)

v5.5.0

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature
improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s
Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re
looking at. With ECH, the router observes only the IP address. This additional privacy is most
effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,
released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the
[HTTPS resource record], and we needed to write new code to fetch these records. This release
includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not
just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the
// same bootstrap client so they share a connection pool and dispatcher.
val bootstrapClient = OkHttpClient()

// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.
val client = bootstrapClient.newBuilder()
  .dns(DnsOverHttps.Builder()
    .client(bootstrapClient)
    .url("https://1.1.1.1/dns-query".toHttpUrl())
    .build())
  .build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are
thwarted because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.
val client = OkHttpClient.Builder()
  .dns(AndroidDns())
  .build()
  • New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling
    projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
  • Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
  • Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
  • Fix: Closing a multipart part's sink no longer closes the entire request body.
  • Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts
    weren’t applied correctly.
  • Fix: Follow [RFC 1008]'s requirements for HTTP QUERY redirects.
  • Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause
    the HTTP call to crash.
  • Upgrade: [Okio 3.18.1][okio_3_18_1].
spring-projects/spring-boot (org.springframework.boot:spring-boot-dependencies)

v4.1.1

Compare Source

⚠️ Attention Required

  • Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the protobuf extension with the grpc plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of protoc-gen-grpc-java as before. #​50822

🐞 Bug Fixes

  • Kafka consumer-specific security protocol is not taken into account #​51369
  • Structured logging: a failed JSON encode corrupts the next log event written on the same thread #​51156
  • Micrometer registries pin the application context #​51135
  • Temporary file is not deleted when ExportedImageTar construction fails #​51132
  • Metadata annotation processor ignores getter-level @NestedConfigurationProperty for records #​51098
  • spring-boot-h2-console pulls servlet-api as transitive dependency #​51095
  • PropertiesLauncher does not log nested archive paths #​51089
  • Methods that return the result of Map#remove are not declared with a @Nullable return type #​51087
  • NativeImageResourceProvider flattens Flyway migration paths in subdirectories #​50964
  • Fix ordering of Kotlinx Serialization CodecCustomizer #​50961
  • JarFile is not closed when finding main class from archive #​50959
  • Application-managed JUL bridge handler should only be removed if installed #​50950
  • CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined #​50944
  • Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health #​50942
  • Resources are not cleaned up when resolving an image that is not yet present in the builder #​50941
  • GraphQlWebMvcAutoConfiguration should apply customizers in order #​50914
  • Auto-configured RedisMessageListenerContainer does not use virtual threads when spring.threads.virtual.enabled is true #​50884
  • Context refresh fails when using Actuator on Jersey without spring-boot-health #​50872
  • Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health #​50871
  • IllegalStateException when binding properties to a @Validated class that contains a map whose value type is a wildcard #​50856
  • High number of connections due to Mongo health indicator #​50852
  • Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri #​50849
  • Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null #​50845
  • PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #​50843
  • Exposing gRPC test server port should backoff if gRPC is not present #​50825
  • JpaBaseConfiguration#entityManagerConfiguration can cause a dependency loop on beans declaring AsyncTaskExecutor #​50801
  • spring.grpc.server.health.include-overall-health is not taken into account #​50799
  • Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute #​50790
  • Managed version of Prometheus Client is not aligned with Micrometer's micrometer-registry-prometheus #​50780
  • Map properties bound from empty strings fail with ConverterNotFoundException #​50773
  • Protobuf Common Protos should not be a managed dependency #​50772
  • An application that depends on spring-boot-security-oauth2-resource-server may fail to start with a ClassNotFoundException when Reactor is on the classpath but WebFlux is not #​50764
  • W3CHeaderParser's decoding is not compliant with RFC 3986 #​50650

📔 Documentation

  • Description of spring.graphql.websocket.connection-init-timeout does not render correctly in the reference guide #​51348
  • spring.profiles.group should have a 'spring-profile-name' hint provider #​51284
  • Remove reference to removed InfluxDB auto-configuration #​51176
  • Use JacksonJsonSerde in Kafka Streams documentation #​51161
  • Document alternatives to HttpMessageConverters #​51129
  • Fix stale type reference for OTLP logging transport metadata #​51119
  • Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type #​51115
  • Caching documentation refers to AutoConfigureCache by its pre-4.0 package #​51113
  • Fix examples in Metadata Format documentation chapter #​51102
  • Improve discoverability of the AOT Cache How-to guides #​51000
  • Table of auto-configured HealthIndicators lists the wrong key for MongoHealthIndicator #​50940
  • Update OpenTelemetryResourceAttributes documentation #​50874
  • Fix @Value placeholder syntax in external config docs #​50873
  • Polish gRPC documentation #​50863
  • Fix duplicate word typos in documentation #​50850
  • Fix forwarded headers property in cloud deployment docs #​50848
  • Refer to spring-boot-starter-webmvc, not deprecated spring-boot-starter-web #​50847
  • Fix documentation inconsistencies #​50800
  • Add Spring gRPC properties to Common Application Properties referrence #​50789
  • Document OTLP SSL service connections #​50782
  • Update docs for changes to optional property binding and JPA repositories bootstrap mode #​50759

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​DragonFSKY, @​LordKay-sudo, @​MacAlsandair, @​SJvaca30, @​SebTardif, @​SimonVerhoeven, @​codingkiddo, @​dhruv-15-03, @​dlwldnjs1009, @​dmitrysulman, @​doehyunbaek, @​filiphr, @​msridhar, @​ngocnhan-tran1996, @​nosan, @​ns3154, @​quaff, @​scordio, @​seonwooj0810, @​skdas20, @​vipi-n, @​vvzvvv, @​wantaekchoi, @​xfocus3, and @​yamamoto-ehhMH

open-telemetry/opentelemetry-java (io.opentelemetry:opentelemetry-bom)

v1.66.0

Compare Source

API
  • Fix Baggage.fromContext() and Baggage.fromContextOrNull() to handle a null context
    (#​8667)
  • Do not percent-encode W3C baggage metadata
    (#​8682)
  • Fix ArrayIndexOutOfBoundsException in OtelEncodingUtils for invalid hex characters
    (#​8748)
SDK
Traces
  • Record processed spans before export completes and reject new spans on shutdown in
    SpanProcessor self-observability instrumentation
    (#​8735)
Metrics
  • Improve explicit bucket histogram contention performance
    (#​8717)
Logs
  • Record processed logs before export completes and reject new logs on shutdown in
    LogRecordProcessor self-observability instrumentation
    (#​8698)
Exporters
  • OTLP: Respect Retry-After in OTLP HTTP senders
    (#​8633)
  • OTLP: Add setEnabledProtocols option to OTLP HTTP exporter builders
    (#​8610)
  • OTLP: Reject mixing keyManager and sslContext in TlsConfigHelper
    (#​8710)
  • OTLP: Fix OkHttpGrpcSender mTLS when using the platform default trust store
    (#​8758)
  • OTLP: Suppress instrumentation of exporter requests in JdkHttpSender
    (#​8757)
  • OTLP: Accept RFC 1123 hostnames in EndpointUtil.validateEndpoint for OkHttp senders
    (#​8746)
  • OTLP: Include the number of affected items in exporter error logging
    (#​8780)
  • OTLP: Add toString to OtlpJsonLogging{Span,Metric,LogRecord}Exporter
    (#​8725)
  • OTLP Profiles: Improve JFR export example and align LinkData null-element handling with the
    spec (#​8349)
  • Prometheus: Remove default host log warning in PrometheusHttpServerBuilder
    (#​8679)
  • Prometheus: Align UCUM byte unit conversions with the specification table
    (#​8752)
Extensions
  • BREAKING Declarative config: Rename generated model POJO setters from with<Prop> to
    set<Prop> (#​8742)
  • Declarative config: Resolve experimental properties on stable APIs in generated model POJOs
    (#​8654)
  • Declarative config: Fix inverted scope_info_enabled and target_info_enabled flags in the
    Prometheus component provider
    (#​8750)
  • Declarative config: Support output_stream in otlp_file/development
    (#​8676)
  • Incubator: Add toString to ComposableAnnotatingSampler
    (#​8645)
Project tooling
  • Remediate zizmor findings in GitHub Actions workflows
    (#​8592)

v1.65.0

Compare Source

NOTE: The opentelemetry-exporter-zipkin artifact has stopped being published. It was
deprecated in a prior release. Users should migrate to OTLP or use a Zipkin-compatible collector
exporter.

API
  • Ignore empty baggage keys in ImmutableBaggage.put
    (#​8658)
  • Use NumberFormatException in baggage decoder
    (#​8593)
  • Fix TraceStateBuilder.remove corrupting the builder when the same key is removed twice
    (#​8613)
Incubating
  • Add bound instrument APIs (BoundLongCounter, BoundDoubleCounter, BoundLongHistogram,
    BoundDoubleHistogram, BoundLongUpDownCounter, BoundDoubleUpDownCounter, BoundLongGauge,
    BoundDoubleGauge) to the incubator metrics API
    (#​8527)
Extensions
  • Trace propagators: Fix JaegerPropagator baggage header key case sensitivity
    (#​8496)
  • Trace propagators: Do not overwrite existing baggage with empty baggage in JaegerPropagator
    (#​8632)
  • Trace propagators: Skip empty baggage keys in OtTracePropagator extract
    (#​8631)
  • Trace propagators: Stop parsing a jaeger-baggage header after 64 tokens, including malformed
    tokens (#​8702)
SDK
  • Update SDK attributes implementation (AttributesMap) to enforce last-value-win semantics based
    on string value of AttributeKey.getKey()
    (#​8548)
Traces
  • Add Sampler shutdown lifecycle: Sampler now extends Closeable and exposes a default
    shutdown() invoked when the SdkTracerProvider is shut down; JaegerRemoteSampler implements
    it to stop its polling executor
    (#​8574)
Metrics
  • Gate PeriodicMetricReader self-observability metrics by internal telemetry version
    (#​8597)
  • Record error.type on failed collections in PeriodicMetricReader
    (#​8650)
  • Testing: Fix LongExemplarAssert.hasFilteredAttributesSatisfyingExactly to enforce exact
    attribute matching
    (#​8518)
Logs
  • Fix ReadWriteLogRecord default getObservedTimestampEpochNanos returning the record timestamp
    (#​8504)
Profiles
  • Fix profiles data model attribute count parameter name and timestamp doc unit
    (#​8514)
Exporters
  • WARNING Zipkin: Delete opentelemetry-exporter-zipkin; the artifact is no longer published
    (#​8677)
  • OTLP: Use HTTP error response bodies in HttpExporter warning logs
    (#​8428)
  • OTLP: Fix OkHttpHttpSender mTLS when using the platform default trust store
    (#​8565)
  • OTLP: Fix sign extension on LogRecord flags in the low-allocation log marshaler
    (#​8493)
  • OTLP: Standardize OkHttpHttpSender, JdkHttpSender, and UpstreamGrpcSender shutdown to
    await executor/channel termination
    (#​8495,
    #​8627,
    #​8624)
  • OTLP: Log the underlying except/ion when a gRPC response frame is invalid
    (#​8626)
  • OTLP: Avoid the unsafe string encoder on Android
    (#​8637)
  • Prometheus: Merge colliding Prometheus label values
    (#​8364)
  • Prometheus: Fix PrometheusHttpServer.toBuilder() dropping the configured default handler
    (#​8619)
  • Logging: Output event name in SystemOutLogRecordExporter
    (#​8609)
  • Logging: Include aggregation temporality in LoggingMetricExporter toString
    (#​8623)
Extensions
  • Autoconfigure: Avoid exposing configuration values in error messages
    (#​8669)
  • Declarative config: Fix Jaeger sampler polling interval configuration
    (#​8668)
  • Declarative config: Remove duplicate getStringList resolver in DeclarativeConfigPropertyUtil
    (#​8572)
  • Declarative config: Replace jsonschema2pojo with a hand-rolled POJO generator
    (#​8600)
  • Incubator: Restore compliance between composite samplers code and the spec
    (#​8450)
Shims
  • DEPRECATION Deprecate the OpenCensus shim public API
    (#​8674)
  • OpenCensus: Preserve OpenCensus status description when converting to OpenTelemetry
    (#​8511)
  • OpenCensus: Add links to the OpenTelemetry span instead of logging a warning and dropping them
    (#​8635)
  • OpenTracing: Return null from TracerShim extract when the carrier has no span context
    (#​8505)
  • OpenTracing: Return the extracted SpanContext when it is sampled but invalid
    (#​8634)
Project tooling
  • Pin japicmp baseline in version.gradle.kts
    (#​8591)
  • Update contributing guide in response to feedback
    (#​8655)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---|---|---| | [https://github.com/actions/setup-java](https://github.com/actions/setup-java) | action | major | `v5` → `v6` | ![age](https://developer.mend.io/api/mc/badges/age/github-tags/actions%2fsetup-java/v6.0.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/actions%2fsetup-java/v5.7.0/v6.0.1?slim=true) | | [org.junit.jupiter:junit-jupiter](https://junit.org/) ([source](https://github.com/junit-team/junit-framework)) | test | patch | `6.1.2` → `6.1.3` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.junit.jupiter:junit-jupiter/6.1.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.junit.jupiter:junit-jupiter/6.1.2/6.1.3?slim=true) | | [com.squareup.okhttp3:okhttp-bom](https://lysine.dev/okhttp/) ([source](https://github.com/lysine-dev/okhttp)) | import | minor | `5.4.0` → `5.5.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/com.squareup.okhttp3:okhttp-bom/5.5.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/com.squareup.okhttp3:okhttp-bom/5.4.0/5.5.0?slim=true) | | [org.springframework.boot:spring-boot-dependencies](https://spring.io/projects/spring-boot) ([source](https://github.com/spring-projects/spring-boot)) | import | patch | `4.1.0` → `4.1.1` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.springframework.boot:spring-boot-dependencies/4.1.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.springframework.boot:spring-boot-dependencies/4.1.0/4.1.1?slim=true) | | [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java) | import | minor | `1.64.0` → `1.66.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/io.opentelemetry:opentelemetry-bom/1.66.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/io.opentelemetry:opentelemetry-bom/1.64.0/1.66.0?slim=true) | --- ### Release Notes <details> <summary>actions/setup-java (https://github.com/actions/setup-java)</summary> ### [`v6.0.1`](https://github.com/actions/setup-java/releases/tag/v6.0.1) [Compare Source](https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1) ##### What's Changed - Fix failing GitHub Actions job for temurin 17 by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1259](https://github.com/actions/setup-java/pull/1259) - Fix Temurin EA E2E signature verification by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1260](https://github.com/actions/setup-java/pull/1260) - Fix Alpine GPG verification failures and support multiple keys by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1262](https://github.com/actions/setup-java/pull/1262) - Fix import-safe checks when scripts are run from a path with symlinks by [@&#8203;otaconix](https://github.com/otaconix) in [#&#8203;1265](https://github.com/actions/setup-java/pull/1265) - Avoid macOS GPG socket overflow on long runner paths by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1266](https://github.com/actions/setup-java/pull/1266) - Complete v6 release highlights in README by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1254](https://github.com/actions/setup-java/pull/1254) - Group and slow routine Dependabot updates by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1255](https://github.com/actions/setup-java/pull/1255) - chore(deps-dev): update eslint and globals by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1256](https://github.com/actions/setup-java/pull/1256) ##### New Contributors - [@&#8203;otaconix](https://github.com/otaconix) made their first contribution in [#&#8203;1265](https://github.com/actions/setup-java/pull/1265) **Full Changelog**: <https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1> ### [`v6.0.0`](https://github.com/actions/setup-java/releases/tag/v6.0.0) [Compare Source](https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0) ##### What's Changed - dist: Migrate from Zulu Discovery API to Azul Metadata API by [@&#8203;jameswald](https://github.com/jameswald) in [#&#8203;1010](https://github.com/actions/setup-java/pull/1010) - feat: add .mvn/extensions.xml to Maven cache key pattern by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1041](https://github.com/actions/setup-java/pull/1041) - Migrate to ESM and upgrade dependencies by [@&#8203;priyagupta108](https://github.com/priyagupta108) in [#&#8203;1078](https://github.com/actions/setup-java/pull/1078) - Map Zulu x86 architecture to i686 for Azul Metadata API by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1079](https://github.com/actions/setup-java/pull/1079) - Rename jdkFile input to jdk-file with deprecated alias by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1083](https://github.com/actions/setup-java/pull/1083) - Infer distribution from asdf .tool-versions vendor prefix by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1084](https://github.com/actions/setup-java/pull/1084) - Add Maven compiler problem matcher for javac diagnostics by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1086](https://github.com/actions/setup-java/pull/1086) - feat: expose cache-primary-key output ([#&#8203;597](https://github.com/actions/setup-java/issues/597)) by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1088](https://github.com/actions/setup-java/pull/1088) - docs: clarify V6 ESM migration is not a user-facing breaking change by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1090](https://github.com/actions/setup-java/pull/1090) - Support multi-field Java versions like `18.0.1.1` by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1092](https://github.com/actions/setup-java/pull/1092) - docs: document seeding the Maven cache for plugin dependencies by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1094](https://github.com/actions/setup-java/pull/1094) - docs: clarify Maven cache paths and key hash inputs by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1096](https://github.com/actions/setup-java/pull/1096) - Support pinning java-version as "latest" by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1093](https://github.com/actions/setup-java/pull/1093) - chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1101](https://github.com/actions/setup-java/pull/1101) - chore(deps-dev): bump eslint-plugin-n from 18.2.1 to 18.2.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1103](https://github.com/actions/setup-java/pull/1103) - chore(deps-dev): bump prettier from 3.9.4 to 3.9.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1105](https://github.com/actions/setup-java/pull/1105) - chore(deps): bump actions/checkout from 6 to 7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1106](https://github.com/actions/setup-java/pull/1106) - chore(deps-dev): bump [@&#8203;types/node](https://github.com/types/node) from 26.1.0 to 26.1.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1104](https://github.com/actions/setup-java/pull/1104) - dist: Cover Tencent Kona JDK 25 by [@&#8203;johnshajiang](https://github.com/johnshajiang) in [#&#8203;1108](https://github.com/actions/setup-java/pull/1108) - chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1102](https://github.com/actions/setup-java/pull/1102) - Preserve Maven toolchains across repeated setup-java runs ([#&#8203;1099](https://github.com/actions/setup-java/issues/1099)) by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1111](https://github.com/actions/setup-java/pull/1111) - dist: Support Liberica NIK ([#&#8203;878](https://github.com/actions/setup-java/issues/878)) by [@&#8203;asm0dey](https://github.com/asm0dey) in [#&#8203;1112](https://github.com/actions/setup-java/pull/1112) - Fix template injection (zizmor alert [#&#8203;118](https://github.com/actions/setup-java/issues/118)) in e2e-versions.yml by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1114](https://github.com/actions/setup-java/pull/1114) - Fix template injection in e2e-versions.yml (zizmor alert [#&#8203;122](https://github.com/actions/setup-java/issues/122)) by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1120](https://github.com/actions/setup-java/pull/1120) - Disable persisted checkout credentials in e2e workflow by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1115](https://github.com/actions/setup-java/pull/1115) - feat: Update recommended configuration for GPG signing by [@&#8203;wetneb](https://github.com/wetneb) in [#&#8203;608](https://github.com/actions/setup-java/pull/608) - Cache Maven and Gradle wrapper distributions separately from the dependency cache by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1097](https://github.com/actions/setup-java/pull/1097) - Consolidate cache-dependency-path e2e workflow and add maven/sbt coverage by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1124](https://github.com/actions/setup-java/pull/1124) - Use gpg.passphraseEnvName instead of the deprecated gpg.passphrase server by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1123](https://github.com/actions/setup-java/pull/1123) - Extract repeated directory-check assertions into check-dir.sh helper by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1127](https://github.com/actions/setup-java/pull/1127) - Consolidate duplicate jobs in e2e-versions workflow by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1125](https://github.com/actions/setup-java/pull/1125) - Use YAML anchors to reduce boilerplate in e2e-versions workflow by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1126](https://github.com/actions/setup-java/pull/1126) - Updated msft json for now by [@&#8203;jmjaffe37](https://github.com/jmjaffe37) in [#&#8203;1129](https://github.com/actions/setup-java/pull/1129) - Document missing action inputs in README by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1130](https://github.com/actions/setup-java/pull/1130) - chore(deps): bump [@&#8203;actions/cache](https://github.com/actions/cache) to 6.2.0 by [@&#8203;philip-gai](https://github.com/philip-gai) in [#&#8203;1128](https://github.com/actions/setup-java/pull/1128) - Add an option to disable Java problem matchers by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1133](https://github.com/actions/setup-java/pull/1133) - docs: update setup-java examples by [@&#8203;HarithaVattikuti](https://github.com/HarithaVattikuti) in [#&#8203;1131](https://github.com/actions/setup-java/pull/1131) - Clarify credential environment variable inputs by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1134](https://github.com/actions/setup-java/pull/1134) - chore(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.63.0 to 8.64.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1135](https://github.com/actions/setup-java/pull/1135) - chore(deps): bump actions/setup-python from 6 to 7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1143](https://github.com/actions/setup-java/pull/1143) - chore(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1142](https://github.com/actions/setup-java/pull/1142) - chore(deps-dev): bump [@&#8203;typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.64.0 to 8.65.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1138](https://github.com/actions/setup-java/pull/1138) - chore(deps-dev): bump lint-staged from 17.0.8 to 17.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1136](https://github.com/actions/setup-java/pull/1136) - chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1137](https://github.com/actions/setup-java/pull/1137) - chore(deps): fix npm audited vulnerabilities by [@&#8203;mhoffrog](https://github.com/mhoffrog) in [#&#8203;1140](https://github.com/actions/setup-java/pull/1140) - Fix formatting issues in README.md by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1144](https://github.com/actions/setup-java/pull/1144) - Remediate npm audit findings and rebuild distributions by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1145](https://github.com/actions/setup-java/pull/1145) - Set GRAALVM\_HOME for GraalVM distributions by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1146](https://github.com/actions/setup-java/pull/1146) - Add force-download option for reproducible JDK builds by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1148](https://github.com/actions/setup-java/pull/1148) - Add OpenJDK distribution by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1147](https://github.com/actions/setup-java/pull/1147) - Support Temurin JDKs with JMOD files by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1149](https://github.com/actions/setup-java/pull/1149) - Document Java package compatibility by distribution by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1152](https://github.com/actions/setup-java/pull/1152) - Fix caching when wrapper distributions are absent by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1151](https://github.com/actions/setup-java/pull/1151) - Reject invalid boolean input values by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1160](https://github.com/actions/setup-java/pull/1160) - Fail on mismatched Maven toolchain ID counts by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1161](https://github.com/actions/setup-java/pull/1161) - Consolidate JDK metadata retry handling by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1162](https://github.com/actions/setup-java/pull/1162) - Add direct setup orchestration tests by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1163](https://github.com/actions/setup-java/pull/1163) - Harden java-package validation across distributions by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1165](https://github.com/actions/setup-java/pull/1165) - Verify JDK downloads with vendor checksums by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1167](https://github.com/actions/setup-java/pull/1167) - Reduce change-time Java E2E matrix by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1170](https://github.com/actions/setup-java/pull/1170) - Add read-only mode for dependency caching by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1169](https://github.com/actions/setup-java/pull/1169) - Test Temurin 25 on hosted runners by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1172](https://github.com/actions/setup-java/pull/1172) - Restore dependency and wrapper caches concurrently by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1174](https://github.com/actions/setup-java/pull/1174) - Add dependency cache path overrides by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1175](https://github.com/actions/setup-java/pull/1175) - Centralize OS/architecture capability validation by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1178](https://github.com/actions/setup-java/pull/1178) - Optimize Temurin tool-cache fast path with lazy loading by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1179](https://github.com/actions/setup-java/pull/1179) - Optimize Maven configuration warm path by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1182](https://github.com/actions/setup-java/pull/1182) - Fix macOS e2e workflow assertions by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1184](https://github.com/actions/setup-java/pull/1184) - Remove legacy Adopt distributions in v6 by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1185](https://github.com/actions/setup-java/pull/1185) - chore(deps): bump actions/upload-artifact from 6 to 7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1190](https://github.com/actions/setup-java/pull/1190) - Reimagine setup-java README by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1192](https://github.com/actions/setup-java/pull/1192) - Document deprecation of setup-java v1 through v4 by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1198](https://github.com/actions/setup-java/pull/1198) - Update setup-java README action from v6 to v5 by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1199](https://github.com/actions/setup-java/pull/1199) - Highlight major changes in setup-java v5 by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1200](https://github.com/actions/setup-java/pull/1200) - Highlight major changes in setup-java v6 by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1203](https://github.com/actions/setup-java/pull/1203) - chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1202](https://github.com/actions/setup-java/pull/1202) - Add conditional JDK caching by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1201](https://github.com/actions/setup-java/pull/1201) - docs: fix README and advanced usage inconsistencies with actual behavior by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1204](https://github.com/actions/setup-java/pull/1204) - Move the extracted JDK into the tool-cache instead of copying it by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1206](https://github.com/actions/setup-java/pull/1206) - docs: drop benchmark numbers from the JDK caching section by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1205](https://github.com/actions/setup-java/pull/1205) - docs: correct the mvn-toolchain-id default in README and action.yml by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1207](https://github.com/actions/setup-java/pull/1207) - Cache resolved JDK releases to remove the vendor API from warm jobs by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1208](https://github.com/actions/setup-java/pull/1208) - Report concrete versions for floating Oracle JDK downloads by [@&#8203;jdubois](https://github.com/jdubois) in [#&#8203;1213](https://github.com/actions/setup-java/pull/1213) - Import Maven signing keys into an isolated GPG home by [@&#8203;jdubois](https://github.com/jdubois) in [#&#8203;1214](https://github.com/actions/setup-java/pull/1214) - Reuse the tool cache for floating versions the resolution cache identified by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1219](https://github.com/actions/setup-java/pull/1219) - Fix JetBrains Runtime release pagination by [@&#8203;jdubois](https://github.com/jdubois) in [#&#8203;1218](https://github.com/actions/setup-java/pull/1218) - Fix JDK resolution cache platform identity by [@&#8203;jdubois](https://github.com/jdubois) in [#&#8203;1210](https://github.com/actions/setup-java/pull/1210) - fix: select musl JDK artifacts on Alpine for Dragonwell, Corretto, Zulu and Liberica by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1220](https://github.com/actions/setup-java/pull/1220) - Fix SapMachine early-access filtering by [@&#8203;jdubois](https://github.com/jdubois) in [#&#8203;1217](https://github.com/actions/setup-java/pull/1217) - Fix JetBrains GitHub token resolution by [@&#8203;jdubois](https://github.com/jdubois) in [#&#8203;1224](https://github.com/actions/setup-java/pull/1224) - Include gradle.properties in Gradle cache key by [@&#8203;jdubois](https://github.com/jdubois) in [#&#8203;1225](https://github.com/actions/setup-java/pull/1225) - Handle early dependency cache failures during Java setup by [@&#8203;jdubois](https://github.com/jdubois) in [#&#8203;1226](https://github.com/actions/setup-java/pull/1226) - Fix js-yaml audit vulnerability by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1228](https://github.com/actions/setup-java/pull/1228) - Fix failing GitHub Actions job for graalvm 24-ea by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1227](https://github.com/actions/setup-java/pull/1227) - Update setup-java for Microsoft's Build of OpenJDK: now pointing task to CDN that is always up-to-date by [@&#8203;jmjaffe37](https://github.com/jmjaffe37) in [#&#8203;1236](https://github.com/actions/setup-java/pull/1236) - chore(deps-dev): bump globals from 17.8.0 to 17.9.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1233](https://github.com/actions/setup-java/pull/1233) - chore(deps-dev): bump [@&#8203;types/semver](https://github.com/types/semver) from 7.7.1 to 7.8.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1229](https://github.com/actions/setup-java/pull/1229) - chore(deps-dev): bump lint-staged from 17.2.0 to 17.3.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1231](https://github.com/actions/setup-java/pull/1231) - chore(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.65.0 to 8.67.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1232](https://github.com/actions/setup-java/pull/1232) - Test JDK 26 installation from SDKMAN by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1238](https://github.com/actions/setup-java/pull/1238) - Add support for multiple Maven servers by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1239](https://github.com/actions/setup-java/pull/1239) - Add Maven dependency-resolution repositories by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1240](https://github.com/actions/setup-java/pull/1240) - Add Red Hat Build of OpenJDK support by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1241](https://github.com/actions/setup-java/pull/1241) - Fix Oracle macOS E2E version check by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1243](https://github.com/actions/setup-java/pull/1243) - ci: constrain cache e2e job modes by [@&#8203;philip-gai](https://github.com/philip-gai) in [#&#8203;1244](https://github.com/actions/setup-java/pull/1244) - Expose contributing guide to GitHub by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1245](https://github.com/actions/setup-java/pull/1245) - Set default signature verification for supported distributions by [@&#8203;johnoliver](https://github.com/johnoliver) in [#&#8203;1246](https://github.com/actions/setup-java/pull/1246) - chore(deps): combine open Dependabot npm updates by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1252](https://github.com/actions/setup-java/pull/1252) - Prepare documentation for v6 release by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1253](https://github.com/actions/setup-java/pull/1253) ##### New Contributors - [@&#8203;jameswald](https://github.com/jameswald) made their first contribution in [#&#8203;1010](https://github.com/actions/setup-java/pull/1010) - [@&#8203;asm0dey](https://github.com/asm0dey) made their first contribution in [#&#8203;1112](https://github.com/actions/setup-java/pull/1112) - [@&#8203;wetneb](https://github.com/wetneb) made their first contribution in [#&#8203;608](https://github.com/actions/setup-java/pull/608) - [@&#8203;philip-gai](https://github.com/philip-gai) made their first contribution in [#&#8203;1128](https://github.com/actions/setup-java/pull/1128) **Full Changelog**: <https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0> </details> <details> <summary>lysine-dev/okhttp (com.squareup.okhttp3:okhttp-bom)</summary> ### [`v5.5.0`](https://github.com/lysine-dev/okhttp/blob/HEAD/CHANGELOG.md#Version-550) *2026-08-16* This release introduces **opt-in** support for \[Encrypted Client Hello (ECH)]. This new feature improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s Wi-Fi router can see that you’re visiting *wikipedia.com*, but it cannot see which page you’re looking at. With ECH, the router observes only the IP address. This additional privacy is most effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website. This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37, released June 2026). When other TLS stacks add ECH support, we'll integrate them. ECH took a lot of work to implement because the encryption keys are published over DNS in the \[HTTPS resource record], and we needed to write new code to fetch these records. This release includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not just IP addresses!), asynchronous streaming results, and in-memory caching. To opt in, you can use `DnsOverHttps`: ```kotlin // DnsOverHttps itself uses OkHttpClient. Build both clients upon the // same bootstrap client so they share a connection pool and dispatcher. val bootstrapClient = OkHttpClient() // This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service. val client = bootstrapClient.newBuilder() .dns(DnsOverHttps.Builder() .client(bootstrapClient) .url("https://1.1.1.1/dns-query".toHttpUrl()) .build()) .build() ``` You could also opt in with our new `AndroidDns` API. Unfortunately, the privacy benefits of ECH are thwarted because its DNS queries are not encrypted by default. ```kotlin // AndroidDns fetches the HTTPS DNS resource records necessary for ECH. val client = OkHttpClient.Builder() .dns(AndroidDns()) .build() ``` - New: OkHttp artifacts are now signed with our \[new signing key]. This project and three sibling projects (\[Retrofit], \[Okio], and \[SQLDelight]) recently joined \[the Commonhaus Foundation]. - Fix: MockWebServer’s `@StartStop` annotation now supports `@Nested` JUnit 5 tests. - Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization. - Fix: Closing a multipart part's sink no longer closes the entire request body. - Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts weren’t applied correctly. - Fix: Follow \[RFC 1008]'s requirements for HTTP QUERY redirects. - Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause the HTTP call to crash. - Upgrade: \[Okio 3.18.1]\[okio\_3\_18\_1]. </details> <details> <summary>spring-projects/spring-boot (org.springframework.boot:spring-boot-dependencies)</summary> ### [`v4.1.1`](https://github.com/spring-projects/spring-boot/releases/tag/v4.1.1) [Compare Source](https://github.com/spring-projects/spring-boot/compare/v4.1.0...v4.1.1) #### :warning: Attention Required - Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the `protobuf` extension with the `grpc` plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of `protoc-gen-grpc-java` as before. [#&#8203;50822](https://github.com/spring-projects/spring-boot/issues/50822) #### :lady\_beetle: Bug Fixes - Kafka consumer-specific security protocol is not taken into account [#&#8203;51369](https://github.com/spring-projects/spring-boot/issues/51369) - Structured logging: a failed JSON encode corrupts the next log event written on the same thread [#&#8203;51156](https://github.com/spring-projects/spring-boot/pull/51156) - Micrometer registries pin the application context [#&#8203;51135](https://github.com/spring-projects/spring-boot/issues/51135) - Temporary file is not deleted when ExportedImageTar construction fails [#&#8203;51132](https://github.com/spring-projects/spring-boot/issues/51132) - Metadata annotation processor ignores getter-level `@NestedConfigurationProperty` for records [#&#8203;51098](https://github.com/spring-projects/spring-boot/issues/51098) - spring-boot-h2-console pulls servlet-api as transitive dependency [#&#8203;51095](https://github.com/spring-projects/spring-boot/issues/51095) - PropertiesLauncher does not log nested archive paths [#&#8203;51089](https://github.com/spring-projects/spring-boot/issues/51089) - Methods that return the result of Map#remove are not declared with a `@Nullable` return type [#&#8203;51087](https://github.com/spring-projects/spring-boot/issues/51087) - NativeImageResourceProvider flattens Flyway migration paths in subdirectories [#&#8203;50964](https://github.com/spring-projects/spring-boot/issues/50964) - Fix ordering of Kotlinx Serialization CodecCustomizer [#&#8203;50961](https://github.com/spring-projects/spring-boot/issues/50961) - JarFile is not closed when finding main class from archive [#&#8203;50959](https://github.com/spring-projects/spring-boot/issues/50959) - Application-managed JUL bridge handler should only be removed if installed [#&#8203;50950](https://github.com/spring-projects/spring-boot/issues/50950) - CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined [#&#8203;50944](https://github.com/spring-projects/spring-boot/issues/50944) - Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health [#&#8203;50942](https://github.com/spring-projects/spring-boot/issues/50942) - Resources are not cleaned up when resolving an image that is not yet present in the builder [#&#8203;50941](https://github.com/spring-projects/spring-boot/issues/50941) - GraphQlWebMvcAutoConfiguration should apply customizers in order [#&#8203;50914](https://github.com/spring-projects/spring-boot/issues/50914) - Auto-configured RedisMessageListenerContainer does not use virtual threads when spring.threads.virtual.enabled is true [#&#8203;50884](https://github.com/spring-projects/spring-boot/issues/50884) - Context refresh fails when using Actuator on Jersey without spring-boot-health [#&#8203;50872](https://github.com/spring-projects/spring-boot/issues/50872) - Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health [#&#8203;50871](https://github.com/spring-projects/spring-boot/issues/50871) - IllegalStateException when binding properties to a `@Validated` class that contains a map whose value type is a wildcard [#&#8203;50856](https://github.com/spring-projects/spring-boot/issues/50856) - High number of connections due to Mongo health indicator [#&#8203;50852](https://github.com/spring-projects/spring-boot/issues/50852) - Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri [#&#8203;50849](https://github.com/spring-projects/spring-boot/issues/50849) - Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null [#&#8203;50845](https://github.com/spring-projects/spring-boot/issues/50845) - PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it [#&#8203;50843](https://github.com/spring-projects/spring-boot/issues/50843) - Exposing gRPC test server port should backoff if gRPC is not present [#&#8203;50825](https://github.com/spring-projects/spring-boot/issues/50825) - JpaBaseConfiguration#entityManagerConfiguration can cause a dependency loop on beans declaring AsyncTaskExecutor [#&#8203;50801](https://github.com/spring-projects/spring-boot/pull/50801) - spring.grpc.server.health.include-overall-health is not taken into account [#&#8203;50799](https://github.com/spring-projects/spring-boot/pull/50799) - Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute [#&#8203;50790](https://github.com/spring-projects/spring-boot/issues/50790) - Managed version of Prometheus Client is not aligned with Micrometer's micrometer-registry-prometheus [#&#8203;50780](https://github.com/spring-projects/spring-boot/issues/50780) - Map properties bound from empty strings fail with ConverterNotFoundException [#&#8203;50773](https://github.com/spring-projects/spring-boot/pull/50773) - Protobuf Common Protos should not be a managed dependency [#&#8203;50772](https://github.com/spring-projects/spring-boot/issues/50772) - An application that depends on spring-boot-security-oauth2-resource-server may fail to start with a ClassNotFoundException when Reactor is on the classpath but WebFlux is not [#&#8203;50764](https://github.com/spring-projects/spring-boot/issues/50764) - W3CHeaderParser's decoding is not compliant with RFC 3986 [#&#8203;50650](https://github.com/spring-projects/spring-boot/pull/50650) #### :notebook\_with\_decorative\_cover: Documentation - Description of spring.graphql.websocket.connection-init-timeout does not render correctly in the reference guide [#&#8203;51348](https://github.com/spring-projects/spring-boot/pull/51348) - spring.profiles.group should have a 'spring-profile-name' hint provider [#&#8203;51284](https://github.com/spring-projects/spring-boot/issues/51284) - Remove reference to removed InfluxDB auto-configuration [#&#8203;51176](https://github.com/spring-projects/spring-boot/issues/51176) - Use JacksonJsonSerde in Kafka Streams documentation [#&#8203;51161](https://github.com/spring-projects/spring-boot/issues/51161) - Document alternatives to HttpMessageConverters [#&#8203;51129](https://github.com/spring-projects/spring-boot/issues/51129) - Fix stale type reference for OTLP logging transport metadata [#&#8203;51119](https://github.com/spring-projects/spring-boot/pull/51119) - Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type [#&#8203;51115](https://github.com/spring-projects/spring-boot/issues/51115) - Caching documentation refers to AutoConfigureCache by its pre-4.0 package [#&#8203;51113](https://github.com/spring-projects/spring-boot/issues/51113) - Fix examples in Metadata Format documentation chapter [#&#8203;51102](https://github.com/spring-projects/spring-boot/issues/51102) - Improve discoverability of the AOT Cache How-to guides [#&#8203;51000](https://github.com/spring-projects/spring-boot/issues/51000) - Table of auto-configured HealthIndicators lists the wrong key for MongoHealthIndicator [#&#8203;50940](https://github.com/spring-projects/spring-boot/issues/50940) - Update OpenTelemetryResourceAttributes documentation [#&#8203;50874](https://github.com/spring-projects/spring-boot/issues/50874) - Fix `@Value` placeholder syntax in external config docs [#&#8203;50873](https://github.com/spring-projects/spring-boot/issues/50873) - Polish gRPC documentation [#&#8203;50863](https://github.com/spring-projects/spring-boot/pull/50863) - Fix duplicate word typos in documentation [#&#8203;50850](https://github.com/spring-projects/spring-boot/issues/50850) - Fix forwarded headers property in cloud deployment docs [#&#8203;50848](https://github.com/spring-projects/spring-boot/issues/50848) - Refer to spring-boot-starter-webmvc, not deprecated spring-boot-starter-web [#&#8203;50847](https://github.com/spring-projects/spring-boot/issues/50847) - Fix documentation inconsistencies [#&#8203;50800](https://github.com/spring-projects/spring-boot/pull/50800) - Add Spring gRPC properties to Common Application Properties referrence [#&#8203;50789](https://github.com/spring-projects/spring-boot/pull/50789) - Document OTLP SSL service connections [#&#8203;50782](https://github.com/spring-projects/spring-boot/pull/50782) - Update docs for changes to optional property binding and JPA repositories bootstrap mode [#&#8203;50759](https://github.com/spring-projects/spring-boot/pull/50759) #### :hammer: Dependency Upgrades - Upgrade to ActiveMQ 6.2.9 [#&#8203;51329](https://github.com/spring-projects/spring-boot/issues/51329) - Upgrade to [Byte Buddy 1.18.11](https://github.com/raphw/byte-buddy/releases/tag/byte-buddy-1.18.11) [#&#8203;51003](https://github.com/spring-projects/spring-boot/issues/51003) - Upgrade to CycloneDX Maven Plugin 2.9.3 [#&#8203;51185](https://github.com/spring-projects/spring-boot/issues/51185) - Upgrade to DB2 JDBC 12.1.5.0 [#&#8203;51005](https://github.com/spring-projects/spring-boot/issues/51005) - Upgrade to Elasticsearch Client 9.4.5 [#&#8203;51368](https://github.com/spring-projects/spring-boot/issues/51368) - Upgrade to Groovy 5.0.8 [#&#8203;51186](https://github.com/spring-projects/spring-boot/issues/51186) - Upgrade to Grpc Java 1.81.1 [#&#8203;51263](https://github.com/spring-projects/spring-boot/issues/51263) - Upgrade to [Grpc Java 1.83.1](https://github.com/grpc/grpc-java/releases/tag/v1.83.1) [#&#8203;51361](https://github.com/spring-projects/spring-boot/issues/51361) - Upgrade to [Hibernate 7.4.5.Final](https://github.com/hibernate/hibernate-orm/releases/tag/7.4.5) [#&#8203;51007](https://github.com/spring-projects/spring-boot/issues/51007) - Upgrade to Hibernate Validator 9.1.3.Final [#&#8203;51187](https://github.com/spring-projects/spring-boot/issues/51187) - Upgrade to HttpClient5 5.6.4 [#&#8203;51330](https://github.com/spring-projects/spring-boot/issues/51330) - Upgrade to HttpCore5 5.4.3 [#&#8203;51010](https://github.com/spring-projects/spring-boot/issues/51010) - Upgrade to [Jackson 2 Bom 2.21.5](https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.21.5) [#&#8203;51011](https://github.com/spring-projects/spring-boot/issues/51011) - Upgrade to [Jackson Bom 3.1.5](https://github.com/FasterXML/jackson/wiki/Jackson-Release-3.1.5) [#&#8203;51012](https://github.com/spring-projects/spring-boot/issues/51012) - Upgrade to Jetty 12.1.12 [#&#8203;51302](https://github.com/spring-projects/spring-boot/issues/51302) - Upgrade to jOOQ 3.21.7 [#&#8203;51303](https://github.com/spring-projects/spring-boot/issues/51303) - Upgrade to [JSpecify 1.0.1](https://github.com/jspecify/jspecify/releases/tag/v1.0.1) [#&#8203;51189](https://github.com/spring-projects/spring-boot/issues/51189) - Upgrade to [Log4j2 2.25.5](https://github.com/apache/logging-log4j2/releases/tag/rel%2F2.25.5) [#&#8203;51015](https://github.com/spring-projects/spring-boot/issues/51015) - Upgrade to Logback 1.5.38 [#&#8203;51016](https://github.com/spring-projects/spring-boot/issues/51016) - Upgrade to MariaDB 3.5.10 [#&#8203;51190](https://github.com/spring-projects/spring-boot/issues/51190) - Upgrade to Maven Help Plugin 3.5.2 [#&#8203;51018](https://github.com/spring-projects/spring-boot/issues/51018) - Upgrade to [Maven Jar Plugin 3.5.1](https://github.com/apache/maven-jar-plugin/releases/tag/maven-jar-plugin-3.5.1) [#&#8203;51191](https://github.com/spring-projects/spring-boot/issues/51191) - Upgrade to [Micrometer 1.17.1](https://github.com/micrometer-metrics/micrometer/releases/tag/v1.17.1) [#&#8203;51251](https://github.com/spring-projects/spring-boot/issues/51251) - Upgrade to [Micrometer Tracing 1.7.1](https://github.com/micrometer-metrics/tracing/releases/tag/v1.7.1) [#&#8203;51252](https://github.com/spring-projects/spring-boot/issues/51252) - Upgrade to [MongoDB 5.8.1](https://github.com/mongodb/mongo-java-driver/releases/tag/r5.8.1) [#&#8203;51360](https://github.com/spring-projects/spring-boot/issues/51360) - Upgrade to Native Build Tools Plugin 1.1.4 [#&#8203;50947](https://github.com/spring-projects/spring-boot/issues/50947) - Upgrade to Native Build Tools Plugin 1.1.8 [#&#8203;51304](https://github.com/spring-projects/spring-boot/issues/51304) - Upgrade to Netty 4.2.17.Final [#&#8203;51305](https://github.com/spring-projects/spring-boot/issues/51305) - Upgrade to Oracle Database 23.26.3.0.0 [#&#8203;51193](https://github.com/spring-projects/spring-boot/issues/51193) - Upgrade to Pooled JMS 3.2.3 [#&#8203;51196](https://github.com/spring-projects/spring-boot/issues/51196) - Upgrade to [Postgresql 42.7.13](https://github.com/pgjdbc/pgjdbc/releases/tag/REL42.7.13) [#&#8203;51022](https://github.com/spring-projects/spring-boot/issues/51022) - Upgrade to Protobuf Java 4.35.1 [#&#8203;51264](https://github.com/spring-projects/spring-boot/issues/51264) - Upgrade to Protobuf Maven Plugin 5.1.8 [#&#8203;51331](https://github.com/spring-projects/spring-boot/issues/51331) - Upgrade to Pulsar 4.2.4 [#&#8203;51306](https://github.com/spring-projects/spring-boot/issues/51306) - Upgrade to [R2DBC MariaDB 1.4.1](https://github.com/mariadb-corporation/mariadb-connector-r2dbc/releases/tag/1.4.1) [#&#8203;51024](https://github.com/spring-projects/spring-boot/issues/51024) - Upgrade to [R2DBC MSSQL 1.0.5.RELEASE](https://github.com/r2dbc/r2dbc-mssql/releases/tag/v1.0.5.RELEASE) [#&#8203;51025](https://github.com/spring-projects/spring-boot/issues/51025) - Upgrade to [R2DBC MySQL 1.4.3](https://github.com/asyncer-io/r2dbc-mysql/releases/tag/r2dbc-mysql-1.4.3) [#&#8203;51194](https://github.com/spring-projects/spring-boot/issues/51194) - Upgrade to [R2DBC Postgresql 1.1.2.RELEASE](https://github.com/pgjdbc/r2dbc-postgresql/releases/tag/v1.1.2.RELEASE) [#&#8203;51026](https://github.com/spring-projects/spring-boot/issues/51026) - Upgrade to [Reactor Bom 2025.0.7](https://github.com/reactor/reactor/releases/tag/2025.0.7) [#&#8203;51253](https://github.com/spring-projects/spring-boot/issues/51253) - Upgrade to [Spring AMQP 4.1.1](https://github.com/spring-projects/spring-amqp/releases/tag/v4.1.1) [#&#8203;51254](https://github.com/spring-projects/spring-boot/issues/51254) - Upgrade to [Spring Batch 6.0.5](https://github.com/spring-projects/spring-batch/releases/tag/v6.0.5) [#&#8203;51255](https://github.com/spring-projects/spring-boot/issues/51255) - Upgrade to [Spring Data Bom 2026.0.1](https://github.com/spring-projects/spring-data-bom/releases/tag/2026.0.1) [#&#8203;51357](https://github.com/spring-projects/spring-boot/issues/51357) - Upgrade to [Spring Framework 7.0.9](https://github.com/spring-projects/spring-framework/releases/tag/v7.0.9) [#&#8203;51256](https://github.com/spring-projects/spring-boot/issues/51256) - Upgrade to [Spring GraphQL 2.0.5](https://github.com/spring-projects/spring-graphql/releases/tag/v2.0.5) [#&#8203;51257](https://github.com/spring-projects/spring-boot/issues/51257) - Upgrade to [Spring gRPC 1.1.1](https://github.com/spring-projects/spring-grpc/releases/tag/v1.1.1) [#&#8203;51171](https://github.com/spring-projects/spring-boot/issues/51171) - Upgrade to [Spring HATEOAS 3.1.2](https://github.com/spring-projects/spring-hateoas/releases/tag/3.1.2) [#&#8203;51358](https://github.com/spring-projects/spring-boot/issues/51358) - Upgrade to [Spring Integration 7.1.1](https://github.com/spring-projects/spring-integration/releases/tag/v7.1.1) [#&#8203;51258](https://github.com/spring-projects/spring-boot/issues/51258) - Upgrade to [Spring Kafka 4.1.1](https://github.com/spring-projects/spring-kafka/releases/tag/v4.1.1) [#&#8203;51259](https://github.com/spring-projects/spring-boot/issues/51259) - Upgrade to [Spring LDAP 4.1.1](https://github.com/spring-projects/spring-ldap/releases/tag/4.1.1) [#&#8203;51260](https://github.com/spring-projects/spring-boot/issues/51260) - Upgrade to [Spring Pulsar 2.0.7](https://github.com/spring-projects/spring-pulsar/releases/tag/v2.0.7) [#&#8203;51328](https://github.com/spring-projects/spring-boot/issues/51328) - Upgrade to [Spring Security 7.1.1](https://github.com/spring-projects/spring-security/releases/tag/7.1.1) [#&#8203;51261](https://github.com/spring-projects/spring-boot/issues/51261) - Upgrade to [Spring Session 4.1.1](https://github.com/spring-projects/spring-session/releases/tag/4.1.1) [#&#8203;51262](https://github.com/spring-projects/spring-boot/issues/51262) - Upgrade to [SQLite JDBC 3.53.2.1](https://github.com/xerial/sqlite-jdbc/releases/tag/3.53.2.1) [#&#8203;51195](https://github.com/spring-projects/spring-boot/issues/51195) - Upgrade to [Tomcat 11.0.24](https://tomcat.apache.org/tomcat-11.0-doc/changelog.html) [#&#8203;51027](https://github.com/spring-projects/spring-boot/issues/51027) - Upgrade to [UnboundID LDAPSDK 7.0.5](https://github.com/pingidentity/ldapsdk/releases/tag/7.0.5) [#&#8203;51028](https://github.com/spring-projects/spring-boot/issues/51028) - Upgrade to WebJars Locator Lite 1.1.4 [#&#8203;51029](https://github.com/spring-projects/spring-boot/issues/51029) - Upgrade to [Yasson 3.0.5](https://github.com/eclipse-ee4j/yasson/releases/tag/3.0.5) [#&#8203;51307](https://github.com/spring-projects/spring-boot/issues/51307) #### :heart: Contributors Thank you to all the contributors who worked on this release: [@&#8203;DragonFSKY](https://github.com/DragonFSKY), [@&#8203;LordKay-sudo](https://github.com/LordKay-sudo), [@&#8203;MacAlsandair](https://github.com/MacAlsandair), [@&#8203;SJvaca30](https://github.com/SJvaca30), [@&#8203;SebTardif](https://github.com/SebTardif), [@&#8203;SimonVerhoeven](https://github.com/SimonVerhoeven), [@&#8203;codingkiddo](https://github.com/codingkiddo), [@&#8203;dhruv-15-03](https://github.com/dhruv-15-03), [@&#8203;dlwldnjs1009](https://github.com/dlwldnjs1009), [@&#8203;dmitrysulman](https://github.com/dmitrysulman), [@&#8203;doehyunbaek](https://github.com/doehyunbaek), [@&#8203;filiphr](https://github.com/filiphr), [@&#8203;msridhar](https://github.com/msridhar), [@&#8203;ngocnhan-tran1996](https://github.com/ngocnhan-tran1996), [@&#8203;nosan](https://github.com/nosan), [@&#8203;ns3154](https://github.com/ns3154), [@&#8203;quaff](https://github.com/quaff), [@&#8203;scordio](https://github.com/scordio), [@&#8203;seonwooj0810](https://github.com/seonwooj0810), [@&#8203;skdas20](https://github.com/skdas20), [@&#8203;vipi-n](https://github.com/vipi-n), [@&#8203;vvzvvv](https://github.com/vvzvvv), [@&#8203;wantaekchoi](https://github.com/wantaekchoi), [@&#8203;xfocus3](https://github.com/xfocus3), and [@&#8203;yamamoto-ehhMH](https://github.com/yamamoto-ehhMH) </details> <details> <summary>open-telemetry/opentelemetry-java (io.opentelemetry:opentelemetry-bom)</summary> ### [`v1.66.0`](https://github.com/open-telemetry/opentelemetry-java/blob/HEAD/CHANGELOG.md#Version-1660-2026-09-11) [Compare Source](https://github.com/open-telemetry/opentelemetry-java/compare/v1.65.0...v1.66.0) ##### API - Fix `Baggage.fromContext()` and `Baggage.fromContextOrNull()` to handle a `null` context ([#&#8203;8667](https://github.com/open-telemetry/opentelemetry-java/pull/8667)) - Do not percent-encode W3C baggage metadata ([#&#8203;8682](https://github.com/open-telemetry/opentelemetry-java/pull/8682)) - Fix `ArrayIndexOutOfBoundsException` in `OtelEncodingUtils` for invalid hex characters ([#&#8203;8748](https://github.com/open-telemetry/opentelemetry-java/pull/8748)) ##### SDK ##### Traces - Record processed spans before export completes and reject new spans on shutdown in `SpanProcessor` self-observability instrumentation ([#&#8203;8735](https://github.com/open-telemetry/opentelemetry-java/pull/8735)) ##### Metrics - Improve explicit bucket histogram contention performance ([#&#8203;8717](https://github.com/open-telemetry/opentelemetry-java/pull/8717)) ##### Logs - Record processed logs before export completes and reject new logs on shutdown in `LogRecordProcessor` self-observability instrumentation ([#&#8203;8698](https://github.com/open-telemetry/opentelemetry-java/pull/8698)) ##### Exporters - OTLP: Respect `Retry-After` in OTLP HTTP senders ([#&#8203;8633](https://github.com/open-telemetry/opentelemetry-java/pull/8633)) - OTLP: Add `setEnabledProtocols` option to OTLP HTTP exporter builders ([#&#8203;8610](https://github.com/open-telemetry/opentelemetry-java/pull/8610)) - OTLP: Reject mixing `keyManager` and `sslContext` in `TlsConfigHelper` ([#&#8203;8710](https://github.com/open-telemetry/opentelemetry-java/pull/8710)) - OTLP: Fix `OkHttpGrpcSender` mTLS when using the platform default trust store ([#&#8203;8758](https://github.com/open-telemetry/opentelemetry-java/pull/8758)) - OTLP: Suppress instrumentation of exporter requests in `JdkHttpSender` ([#&#8203;8757](https://github.com/open-telemetry/opentelemetry-java/pull/8757)) - OTLP: Accept RFC 1123 hostnames in `EndpointUtil.validateEndpoint` for OkHttp senders ([#&#8203;8746](https://github.com/open-telemetry/opentelemetry-java/pull/8746)) - OTLP: Include the number of affected items in exporter error logging ([#&#8203;8780](https://github.com/open-telemetry/opentelemetry-java/pull/8780)) - OTLP: Add `toString` to `OtlpJsonLogging{Span,Metric,LogRecord}Exporter` ([#&#8203;8725](https://github.com/open-telemetry/opentelemetry-java/pull/8725)) - OTLP Profiles: Improve JFR export example and align `LinkData` null-element handling with the spec ([#&#8203;8349](https://github.com/open-telemetry/opentelemetry-java/pull/8349)) - Prometheus: Remove default host log warning in `PrometheusHttpServerBuilder` ([#&#8203;8679](https://github.com/open-telemetry/opentelemetry-java/pull/8679)) - Prometheus: Align UCUM byte unit conversions with the specification table ([#&#8203;8752](https://github.com/open-telemetry/opentelemetry-java/pull/8752)) ##### Extensions - **BREAKING** Declarative config: Rename generated model POJO setters from `with<Prop>` to `set<Prop>` ([#&#8203;8742](https://github.com/open-telemetry/opentelemetry-java/pull/8742)) - Declarative config: Resolve experimental properties on stable APIs in generated model POJOs ([#&#8203;8654](https://github.com/open-telemetry/opentelemetry-java/pull/8654)) - Declarative config: Fix inverted `scope_info_enabled` and `target_info_enabled` flags in the Prometheus component provider ([#&#8203;8750](https://github.com/open-telemetry/opentelemetry-java/pull/8750)) - Declarative config: Support `output_stream` in `otlp_file/development` ([#&#8203;8676](https://github.com/open-telemetry/opentelemetry-java/pull/8676)) - Incubator: Add `toString` to `ComposableAnnotatingSampler` ([#&#8203;8645](https://github.com/open-telemetry/opentelemetry-java/pull/8645)) ##### Project tooling - Remediate `zizmor` findings in GitHub Actions workflows ([#&#8203;8592](https://github.com/open-telemetry/opentelemetry-java/pull/8592)) ### [`v1.65.0`](https://github.com/open-telemetry/opentelemetry-java/blob/HEAD/CHANGELOG.md#Version-1650-2026-08-07) [Compare Source](https://github.com/open-telemetry/opentelemetry-java/compare/v1.64.0...v1.65.0) **NOTE:** The `opentelemetry-exporter-zipkin` artifact has stopped being published. It was deprecated in a prior release. Users should migrate to OTLP or use a Zipkin-compatible collector exporter. ##### API - Ignore empty baggage keys in `ImmutableBaggage.put` ([#&#8203;8658](https://github.com/open-telemetry/opentelemetry-java/pull/8658)) - Use `NumberFormatException` in baggage decoder ([#&#8203;8593](https://github.com/open-telemetry/opentelemetry-java/pull/8593)) - Fix `TraceStateBuilder.remove` corrupting the builder when the same key is removed twice ([#&#8203;8613](https://github.com/open-telemetry/opentelemetry-java/pull/8613)) ##### Incubating - Add bound instrument APIs (`BoundLongCounter`, `BoundDoubleCounter`, `BoundLongHistogram`, `BoundDoubleHistogram`, `BoundLongUpDownCounter`, `BoundDoubleUpDownCounter`, `BoundLongGauge`, `BoundDoubleGauge`) to the incubator metrics API ([#&#8203;8527](https://github.com/open-telemetry/opentelemetry-java/pull/8527)) ##### Extensions - Trace propagators: Fix `JaegerPropagator` baggage header key case sensitivity ([#&#8203;8496](https://github.com/open-telemetry/opentelemetry-java/pull/8496)) - Trace propagators: Do not overwrite existing baggage with empty baggage in `JaegerPropagator` ([#&#8203;8632](https://github.com/open-telemetry/opentelemetry-java/pull/8632)) - Trace propagators: Skip empty baggage keys in `OtTracePropagator` extract ([#&#8203;8631](https://github.com/open-telemetry/opentelemetry-java/pull/8631)) - Trace propagators: Stop parsing a `jaeger-baggage` header after 64 tokens, including malformed tokens ([#&#8203;8702](https://github.com/open-telemetry/opentelemetry-java/pull/8702)) ##### SDK - Update SDK attributes implementation (`AttributesMap`) to enforce last-value-win semantics based on string value of `AttributeKey.getKey()` ([#&#8203;8548](https://github.com/open-telemetry/opentelemetry-java/pull/8548)) ##### Traces - Add `Sampler` shutdown lifecycle: `Sampler` now extends `Closeable` and exposes a default `shutdown()` invoked when the `SdkTracerProvider` is shut down; `JaegerRemoteSampler` implements it to stop its polling executor ([#&#8203;8574](https://github.com/open-telemetry/opentelemetry-java/pull/8574)) ##### Metrics - Gate `PeriodicMetricReader` self-observability metrics by internal telemetry version ([#&#8203;8597](https://github.com/open-telemetry/opentelemetry-java/pull/8597)) - Record `error.type` on failed collections in `PeriodicMetricReader` ([#&#8203;8650](https://github.com/open-telemetry/opentelemetry-java/pull/8650)) - Testing: Fix `LongExemplarAssert.hasFilteredAttributesSatisfyingExactly` to enforce exact attribute matching ([#&#8203;8518](https://github.com/open-telemetry/opentelemetry-java/pull/8518)) ##### Logs - Fix `ReadWriteLogRecord` default `getObservedTimestampEpochNanos` returning the record timestamp ([#&#8203;8504](https://github.com/open-telemetry/opentelemetry-java/pull/8504)) ##### Profiles - Fix profiles data model attribute count parameter name and timestamp doc unit ([#&#8203;8514](https://github.com/open-telemetry/opentelemetry-java/pull/8514)) ##### Exporters - **WARNING** Zipkin: Delete `opentelemetry-exporter-zipkin`; the artifact is no longer published ([#&#8203;8677](https://github.com/open-telemetry/opentelemetry-java/pull/8677)) - OTLP: Use HTTP error response bodies in `HttpExporter` warning logs ([#&#8203;8428](https://github.com/open-telemetry/opentelemetry-java/pull/8428)) - OTLP: Fix `OkHttpHttpSender` mTLS when using the platform default trust store ([#&#8203;8565](https://github.com/open-telemetry/opentelemetry-java/pull/8565)) - OTLP: Fix sign extension on `LogRecord` flags in the low-allocation log marshaler ([#&#8203;8493](https://github.com/open-telemetry/opentelemetry-java/pull/8493)) - OTLP: Standardize `OkHttpHttpSender`, `JdkHttpSender`, and `UpstreamGrpcSender` shutdown to await executor/channel termination ([#&#8203;8495](https://github.com/open-telemetry/opentelemetry-java/pull/8495), [#&#8203;8627](https://github.com/open-telemetry/opentelemetry-java/pull/8627), [#&#8203;8624](https://github.com/open-telemetry/opentelemetry-java/pull/8624)) - OTLP: Log the underlying except/ion when a gRPC response frame is invalid ([#&#8203;8626](https://github.com/open-telemetry/opentelemetry-java/pull/8626)) - OTLP: Avoid the unsafe string encoder on Android ([#&#8203;8637](https://github.com/open-telemetry/opentelemetry-java/pull/8637)) - Prometheus: Merge colliding Prometheus label values ([#&#8203;8364](https://github.com/open-telemetry/opentelemetry-java/pull/8364)) - Prometheus: Fix `PrometheusHttpServer.toBuilder()` dropping the configured default handler ([#&#8203;8619](https://github.com/open-telemetry/opentelemetry-java/pull/8619)) - Logging: Output event name in `SystemOutLogRecordExporter` ([#&#8203;8609](https://github.com/open-telemetry/opentelemetry-java/pull/8609)) - Logging: Include aggregation temporality in `LoggingMetricExporter` `toString` ([#&#8203;8623](https://github.com/open-telemetry/opentelemetry-java/pull/8623)) ##### Extensions - Autoconfigure: Avoid exposing configuration values in error messages ([#&#8203;8669](https://github.com/open-telemetry/opentelemetry-java/pull/8669)) - Declarative config: Fix Jaeger sampler polling interval configuration ([#&#8203;8668](https://github.com/open-telemetry/opentelemetry-java/pull/8668)) - Declarative config: Remove duplicate `getStringList` resolver in `DeclarativeConfigPropertyUtil` ([#&#8203;8572](https://github.com/open-telemetry/opentelemetry-java/pull/8572)) - Declarative config: Replace `jsonschema2pojo` with a hand-rolled POJO generator ([#&#8203;8600](https://github.com/open-telemetry/opentelemetry-java/pull/8600)) - Incubator: Restore compliance between composite samplers code and the spec ([#&#8203;8450](https://github.com/open-telemetry/opentelemetry-java/pull/8450)) ##### Shims - **DEPRECATION** Deprecate the OpenCensus shim public API ([#&#8203;8674](https://github.com/open-telemetry/opentelemetry-java/pull/8674)) - OpenCensus: Preserve OpenCensus status description when converting to OpenTelemetry ([#&#8203;8511](https://github.com/open-telemetry/opentelemetry-java/pull/8511)) - OpenCensus: Add links to the OpenTelemetry span instead of logging a warning and dropping them ([#&#8203;8635](https://github.com/open-telemetry/opentelemetry-java/pull/8635)) - OpenTracing: Return `null` from `TracerShim` extract when the carrier has no span context ([#&#8203;8505](https://github.com/open-telemetry/opentelemetry-java/pull/8505)) - OpenTracing: Return the extracted `SpanContext` when it is sampled but invalid ([#&#8203;8634](https://github.com/open-telemetry/opentelemetry-java/pull/8634)) ##### Project tooling - Pin japicmp baseline in `version.gradle.kts` ([#&#8203;8591](https://github.com/open-telemetry/opentelemetry-java/pull/8591)) - Update contributing guide in response to feedback ([#&#8203;8655](https://github.com/open-telemetry/opentelemetry-java/pull/8655)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzEuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjY1LjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->
fix(deps): update dependency de.loosetie.logging:lt-logging-parent to v1.0.11
Some checks failed
/ release (pull_request) Failing after 32s
Details
9bfc454de8
renovate-bot scheduled this pull request to auto merge when all checks succeed 2026-07-22 01:07:55 +00:00
renovate-bot force-pushed renovate/all from 9bfc454de8
Some checks failed
/ release (pull_request) Failing after 32s
Details
to e502089725
Some checks failed
/ release (pull_request) Failing after 31s
Details
2026-08-08 01:08:22 +00:00 Compare
renovate-bot changed title from fix(deps): update dependency de.loosetie.logging:lt-logging-parent to v1.0.11 to fix(deps): update all dependencies 2026-08-08 01:08:22 +00:00
renovate-bot force-pushed renovate/all from e502089725
Some checks failed
/ release (pull_request) Failing after 31s
Details
to 56a4fb56a9
Some checks failed
/ release (pull_request) Failing after 34s
Details
2026-08-17 01:07:49 +00:00 Compare
renovate-bot force-pushed renovate/all from 56a4fb56a9
Some checks failed
/ release (pull_request) Failing after 34s
Details
to f831606ee4
Some checks failed
/ release (pull_request) Failing after 33s
Details
2026-08-18 01:07:54 +00:00 Compare
renovate-bot force-pushed renovate/all from f831606ee4
Some checks failed
/ release (pull_request) Failing after 33s
Details
to 842227b7da
Some checks failed
/ release (pull_request) Failing after 31s
Details
2026-08-21 01:08:19 +00:00 Compare
renovate-bot force-pushed renovate/all from 842227b7da
Some checks failed
/ release (pull_request) Failing after 31s
Details
to 9a867d88a1
Some checks failed
/ release (pull_request) Failing after 10s
Details
2026-08-25 01:09:10 +00:00 Compare
renovate-bot force-pushed renovate/all from 9a867d88a1
Some checks failed
/ release (pull_request) Failing after 10s
Details
to 79387d1865
Some checks failed
/ release (pull_request) Failing after 23s
Details
2026-08-26 01:08:01 +00:00 Compare
renovate-bot force-pushed renovate/all from 79387d1865
Some checks failed
/ release (pull_request) Failing after 23s
Details
to 88c34b7c9a
Some checks failed
/ release (pull_request) Failing after 11s
Details
2026-09-02 01:08:30 +00:00 Compare
renovate-bot force-pushed renovate/all from 88c34b7c9a
Some checks failed
/ release (pull_request) Failing after 11s
Details
to 22dc92bfb5
Some checks failed
/ release (pull_request) Failing after 11s
Details
2026-09-03 01:08:55 +00:00 Compare
renovate-bot force-pushed renovate/all from 22dc92bfb5
Some checks failed
/ release (pull_request) Failing after 11s
Details
to 93443f87b9
All checks were successful
/ release (pull_request) Successful in 2m8s
Details
2026-09-12 01:08:33 +00:00 Compare
All checks were successful
/ release (pull_request) Successful in 2m8s
Details
This pull request doesn't have enough approvals yet. 0 of 1 approvals granted.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/all:renovate/all
git switch renovate/all
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
DenktMit-OSS/lt-logging!9
No description provided.