An open index of dependabot pull requests across open source projects.

deps: bump the java-dependencies group across 1 directory with 16 updates

Closed
Number: #19
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: March 02, 2026 at 01:19 AM UTC
(5 months ago)
Updated: April 20, 2026 at 02:28 PM UTC
(3 months ago)
Closed: April 20, 2026 at 02:28 PM UTC
(3 months ago)
Time to Close: about 2 months
Labels:
dependencies java
Description:

Bumps the java-dependencies group with 16 updates in the / directory:

Package From To
org.slf4j:slf4j-api 2.0.9 2.0.17
com.fasterxml.jackson.core:jackson-databind 2.16.0 2.21.1
io.netty:netty-all 4.1.101.Final 4.2.10.Final
io.micrometer:micrometer-core 1.12.0 1.16.3
io.opentelemetry:opentelemetry-api 1.34.0 1.59.0
io.opentelemetry:opentelemetry-context 1.34.0 1.59.0
org.mockito:mockito-core 5.7.0 5.22.0
org.apache.maven.plugins:maven-compiler-plugin 3.11.0 3.15.0
org.apache.maven.plugins:maven-surefire-plugin 3.2.2 3.5.5
org.jacoco:jacoco-maven-plugin 0.8.11 0.8.14
com.github.spotbugs:spotbugs-maven-plugin 4.8.3.1 4.9.8.2
org.apache.maven.plugins:maven-source-plugin 3.3.0 3.4.0
org.apache.maven.plugins:maven-javadoc-plugin 3.6.3 3.12.0
org.apache.maven.plugins:maven-gpg-plugin 3.1.0 3.2.8
org.sonatype.plugins:nexus-staging-maven-plugin 1.6.13 1.7.0
org.slf4j:slf4j-simple 2.0.9 2.0.17

Updates org.slf4j:slf4j-api from 2.0.9 to 2.0.17

Updates com.fasterxml.jackson.core:jackson-databind from 2.16.0 to 2.21.1

Commits

Updates io.netty:netty-all from 4.1.101.Final to 4.2.10.Final

Commits
  • 4cc9873 [maven-release-plugin] prepare release netty-4.2.10.Final
  • 54b8663 Remove unnecessary allocations and abstractions in HttpContentCompressor (#16...
  • 961f427 Update to netty-tcnative 2.0.75.Final (#16227)
  • 3007ba9 Use recommanded finalize chain pattern when override finalize() method (#16212)
  • b918042 Update some dependencies (#16198) (#16215)
  • 874c995 Reduce allocations on DefaultHeaders::containsValue (#15843)
  • e0fe794 Remove unnecessary null check in WebSocketServerExtensionHandler (#16201)
  • 1b0636b Move default compression options into static variable in HttpContentCompresso...
  • 85a3a0e codec-http2: move the accessors from Http2Headers to DefaultHttp2Headers (#16...
  • f44a88d Improve chunk picking for the large-size buddy allocator (#16179)
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-core from 1.12.0 to 1.16.3

Release notes

Sourced from io.micrometer:micrometer-core's releases.

1.16.3

:lady_beetle: Bug Fixes

  • Add immutable noop Observation.Context #7133
  • OSGi test isn't reporting failures #7060

:notebook_with_decorative_cover: Documentation

  • Docs: Align AsciiDoc callout syntax #7148
  • Improve documentation of ExecutorServiceMetrics #7083

:hammer: Dependency Upgrades

  • Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.26 #7125
  • Bump com.hazelcast:hazelcast from 5.3.8 to 5.6.0 #6802
  • Bump com.netflix.spectator:spectator-reg-atlas from 1.9.3 to 1.9.4 #7166
  • Bump dropwizard-metrics from 4.2.37 to 4.2.38 #7120
  • Bump gradle-wrapper from 8.14.3 to 8.14.4 #7112
  • Bump grpc from 1.76.2 to 1.76.3 #7137
  • Bump io.dropwizard.metrics5:metrics-core from 5.0.5 to 5.0.6 #7124
  • Bump io.freefair.aspectj.post-compile-weaving from 8.14.3 to 8.14.4 #7070
  • Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25 #7101
  • Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 #7126

:heart: Contributors

Thank you to all the contributors who worked on this release:

@​izeye, @​mateusz-nalepa, and @​tkmsaaaam

1.16.2

:lady_beetle: Bug Fixes

  • CaffeineCacheMetrics nullability is incompatible with Caffeine 3.2.3 #6973
  • ExecutorServiceMetrics: repeatedly logs exception when monitoring ThreadPerTaskExecutor without --add-opens #6726

:hammer: Dependency Upgrades

  • Bump ch.qos.logback:logback-classic from 1.5.21 to 1.5.24 #7027
  • Bump com.netflix.spectator:spectator-reg-atlas from 1.9.2 to 1.9.3 #7051
  • Bump com.uber.nullaway:nullaway from 0.12.14 to 0.12.15 #7020
  • Bump grpc from 1.76.1 to 1.76.2 #6952
  • Bump maven-resolver from 1.9.24 to 1.9.25 #6965
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.5.2 #7019
  • Bump org.junit:junit-bom from 5.14.1 to 5.14.2 #7056
  • Bump spring6 from 6.2.14 to 6.2.15 #6971
  • Bump testcontainers from 1.21.3 to 1.21.4 #6993

:heart: Contributors

... (truncated)

Commits
  • 1963aac Downgrade Netty from 4.2.10 to 4.1.131 (#7177)
  • aecd95d Merge branch '1.15.x' into 1.16.x
  • cd83609 Improve flakiness of StatsdMeterRegistryPublishTest (#7053)
  • 991f09c Merge branch '1.15.x' into 1.16.x
  • bcbf4fe Bump io.micrometer:context-propagation from 1.1.3 to 1.1.4 (#7173)
  • 8fd4212 Bump io.micrometer:context-propagation from 1.2.0 to 1.2.1 (#7172)
  • f42488e Bump com.netflix.spectator:spectator-reg-atlas from 1.9.3 to 1.9.4 (#7166)
  • 848e9a9 Bump io.netty:netty-bom from 4.2.9.Final to 4.2.10.Final (#7165)
  • 8e309f3 Bump io.netty:netty-bom from 4.1.130.Final to 4.1.131.Final (#7162)
  • 0f9224f docs: fix broken callout list structure in example blocks (#7148)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-api from 1.34.0 to 1.59.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.59.0

API

  • Stabilize complex attributes (#7973)
  • Limit init valid hex array to range that can be true (#7809)

Extensions

  • Trace propagators: Deprecate OtTracePropagator (#8020)
  • Trace propagators: Deprecate JaegerPropagator (#8019)

SDK

  • Move io.opentelemetry.sdk.internal to io.opentelemetry.sdk.common.internal (#8003)
  • Always return ExtendedOpenTelemetry when incubator is available (#7991)

Traces

  • Fix memory leak in SdkSpan#spanEndingThread (#7984)

Metrics

  • Rework and publish metric benchmarks (#8000)
  • Update LongLastValueAggregator algo to avoid allocations (#8017)

Testing

  • Fix OTel JUnit5 Extension cleanup when using Nested test classes (#7999)
  • Add assertion support for Span hasException(null) (#8033)

Exporters

  • DEPRECATION: opentelemetry-exporter-zipkin is now deprecated with the last release planned for 1.65.0 (August 2026) (#7974)
  • Refactor http, grpc senders and promote to public API (#7782)

Extensions

  • Jaeger remote sampler: Remove unused code (#7970)
  • Incubator: Add AlwaysRecordSampler (#7877)

Project tooling

  • Align generate release contributors (#8023)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​austince @​baolongnt

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.59.0 (2026-02-06)

API

  • Stabilize complex attributes (#7973)
  • Limit init valid hex array to range that can be true (#7809)

Extensions

  • Trace propagators: Deprecate OtTracePropagator (#8020)
  • Trace propagators: Deprecate JaegerPropagator (#8019)

SDK

  • Move io.opentelemetry.sdk.internal to io.opentelemetry.sdk.common.internal (#8003)
  • Always return ExtendedOpenTelemetry when incubator is available (#7991)

Traces

  • Fix memory leak in SdkSpan#spanEndingThread (#7984)

Metrics

  • Rework and publish metric benchmarks (#8000)
  • Update LongLastValueAggregator algo to avoid allocations (#8017)

Testing

  • Fix OTel JUnit5 Extension cleanup when using Nested test classes (#7999)
  • Add assertion support for Span hasException(null) (#8033)

Exporters

  • DEPRECATION: opentelemetry-exporter-zipkin is now deprecated with the last release planned for 1.65.0 (August 2026) (#7974)
  • Refactor http, grpc senders and promote to public API (#7782)

... (truncated)

Commits
  • d01a599 [release/v1.59.x] Prepare release 1.59.0 (#8055)
  • c2d6229 Prepare for 1.59.0 release (#8052)
  • 4335cf2 Stabilize complex attributes (#7973)
  • 3f5411d fix(deps): update dependency io.netty:netty-bom to v4.2.10.final (#8049)
  • ad771ea fix(deps): update armeriaversion to v1.36.0 (#8048)
  • a01befb chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.145...
  • 089600f fix(deps): update dependency com.google.api.grpc:proto-google-common-protos t...
  • d31d468 chore(deps): update plugin de.undercouch.download to v5.7.0 (#8043)
  • c68989a fix(deps): update dependency io.grpc:grpc-bom to v1.79.0 (#8044)
  • 1c4835c chore(deps): update plugin org.jsonschema2pojo to v1.3.2 (#8042)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-context from 1.34.0 to 1.59.0

Release notes

Sourced from io.opentelemetry:opentelemetry-context's releases.

Version 1.59.0

API

  • Stabilize complex attributes (#7973)
  • Limit init valid hex array to range that can be true (#7809)

Extensions

  • Trace propagators: Deprecate OtTracePropagator (#8020)
  • Trace propagators: Deprecate JaegerPropagator (#8019)

SDK

  • Move io.opentelemetry.sdk.internal to io.opentelemetry.sdk.common.internal (#8003)
  • Always return ExtendedOpenTelemetry when incubator is available (#7991)

Traces

  • Fix memory leak in SdkSpan#spanEndingThread (#7984)

Metrics

  • Rework and publish metric benchmarks (#8000)
  • Update LongLastValueAggregator algo to avoid allocations (#8017)

Testing

  • Fix OTel JUnit5 Extension cleanup when using Nested test classes (#7999)
  • Add assertion support for Span hasException(null) (#8033)

Exporters

  • DEPRECATION: opentelemetry-exporter-zipkin is now deprecated with the last release planned for 1.65.0 (August 2026) (#7974)
  • Refactor http, grpc senders and promote to public API (#7782)

Extensions

  • Jaeger remote sampler: Remove unused code (#7970)
  • Incubator: Add AlwaysRecordSampler (#7877)

Project tooling

  • Align generate release contributors (#8023)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​austince @​baolongnt

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-context's changelog.

Version 1.59.0 (2026-02-06)

API

  • Stabilize complex attributes (#7973)
  • Limit init valid hex array to range that can be true (#7809)

Extensions

  • Trace propagators: Deprecate OtTracePropagator (#8020)
  • Trace propagators: Deprecate JaegerPropagator (#8019)

SDK

  • Move io.opentelemetry.sdk.internal to io.opentelemetry.sdk.common.internal (#8003)
  • Always return ExtendedOpenTelemetry when incubator is available (#7991)

Traces

  • Fix memory leak in SdkSpan#spanEndingThread (#7984)

Metrics

  • Rework and publish metric benchmarks (#8000)
  • Update LongLastValueAggregator algo to avoid allocations (#8017)

Testing

  • Fix OTel JUnit5 Extension cleanup when using Nested test classes (#7999)
  • Add assertion support for Span hasException(null) (#8033)

Exporters

  • DEPRECATION: opentelemetry-exporter-zipkin is now deprecated with the last release planned for 1.65.0 (August 2026) (#7974)
  • Refactor http, grpc senders and promote to public API (#7782)

... (truncated)

Commits
  • d01a599 [release/v1.59.x] Prepare release 1.59.0 (#8055)
  • c2d6229 Prepare for 1.59.0 release (#8052)
  • 4335cf2 Stabilize complex attributes (#7973)
  • 3f5411d fix(deps): update dependency io.netty:netty-bom to v4.2.10.final (#8049)
  • ad771ea fix(deps): update armeriaversion to v1.36.0 (#8048)
  • a01befb chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.145...
  • 089600f fix(deps): update dependency com.google.api.grpc:proto-google-common-protos t...
  • d31d468 chore(deps): update plugin de.undercouch.download to v5.7.0 (#8043)
  • c68989a fix(deps): update dependency io.grpc:grpc-bom to v1.79.0 (#8044)
  • 1c4835c chore(deps): update plugin org.jsonschema2pojo to v1.3.2 (#8042)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-context from 1.34.0 to 1.59.0

Release notes

Sourced from io.opentelemetry:opentelemetry-context's releases.

Version 1.59.0

API

  • Stabilize complex attributes (#7973)
  • Limit init valid hex array to range that can be true (#7809)

Extensions

  • Trace propagators: Deprecate OtTracePropagator (#8020)
  • Trace propagators: Deprecate JaegerPropagator (#8019)

SDK

  • Move io.opentelemetry.sdk.internal to io.opentelemetry.sdk.common.internal (#8003)
  • Always return ExtendedOpenTelemetry when incubator is available (#7991)

Traces

  • Fix memory leak in SdkSpan#spanEndingThread (#7984)

Metrics

  • Rework and publish metric benchmarks (#8000)
  • Update LongLastValueAggregator algo to avoid allocations (#8017)

Testing

  • Fix OTel JUnit5 Extension cleanup when using Nested test classes (#7999)
  • Add assertion support for Span hasException(null) (#8033)

Exporters

  • DEPRECATION: opentelemetry-exporter-zipkin is now deprecated with the last release planned for 1.65.0 (August 2026) (#7974)
  • Refactor http, grpc senders and promote to public API (#7782)

Extensions

  • Jaeger remote sampler: Remove unused code (#7970)
  • Incubator: Add AlwaysRecordSampler (#7877)

Project tooling

  • Align generate release contributors (#8023)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​austince @​baolongnt

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-context's changelog.

Version 1.59.0 (2026-02-06)

API

  • Stabilize complex attributes (#7973)
  • Limit init valid hex array to range that can be true (#7809)

Extensions

  • Trace propagators: Deprecate OtTracePropagator (#8020)
  • Trace propagators: Deprecate JaegerPropagator (#8019)

SDK

  • Move io.opentelemetry.sdk.internal to io.opentelemetry.sdk.common.internal (#8003)
  • Always return ExtendedOpenTelemetry when incubator is available (#7991)

Traces

  • Fix memory leak in SdkSpan#spanEndingThread (#7984)

Metrics

  • Rework and publish metric benchmarks (#8000)
  • Update LongLastValueAggregator algo to avoid allocations (#8017)

Testing

  • Fix OTel JUnit5 Extension cleanup when using Nested test classes (#7999)
  • Add assertion support for Span hasException(null) (#8033)

Exporters

  • DEPRECATION: opentelemetry-exporter-zipkin is now deprecated with the last release planned for 1.65.0 (August 2026) (#7974)
  • Refactor http, grpc senders and promote to public API (#7782)

... (truncated)

Commits
  • d01a599 [release/v1.59.x] Prepare release 1.59.0 (#8055)
  • c2d6229 Prepare for 1.59.0 release (#8052)
  • 4335cf2 Stabilize complex attributes (#7973)
  • 3f5411d fix(deps): update dependency io.netty:netty-bom to v4.2.10.final (#8049)
  • ad771ea fix(deps): update armeriaversion to v1.36.0 (#8048)
  • a01befb chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.145...
  • 089600f fix(deps): update dependency com.google.api.grpc:proto-google-common-protos t...
  • d31d468 chore(deps): update plugin de.undercouch.download to v5.7.0 (#8043)
  • c68989a fix(deps): update dependency io.grpc:grpc-bom to v1.79.0 (#8044)
  • 1c4835c chore(deps): update plugin org.jsonschema2pojo to v1.3.2 (#8042)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-core from 5.7.0 to 5.22.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.22.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.22.0

v5.21.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0

v5.20.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.20.0

... (truncated)

Commits
  • 25f1395 Add core API to enable Kotlin singleton mocking (#3762)
  • ef9ee55 Avoids mocking private static methods, as well as package-private static meth...
  • d16fcfc Bump graalvm/setup-graalvm from 1.4.4 to 1.4.5 (#3780)
  • 27eb8a3 Clarify RETURNS_MOCKS behavior with sealed abstract enums (Java 15+) (#3773)
  • 9e5d449 Add tests for Sets utility class (#3771)
  • 8d9a62f Bump actions/upload-artifact from 5 to 6 (#3774)
  • 09d2230 Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
  • df3e0cc Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
  • 04a6e9f Bump actions/checkout from 5 to 6 (#3765)
  • 756a3cf Add description of matchers to potential mismatch (#3760)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.15.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.15.0

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

3.14.0

... (truncated)

Commits
  • 9290cb3 [maven-release-plugin] prepare release maven-compiler-plugin-3.15.0
  • 3657d40 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
  • 7bbf805 Bump plexusCompilerVersion from 2.16.1 to 2.16.2
  • 57fa938 Bump org.apache.maven.plugins:maven-plugins from 46 to 47
  • 385e3f2 Fix Java 25 compatibility during integration tests (#1020)
  • 6b34423 Bump org.apache.maven.plugins:maven-plugins from 45 to 46
  • aaeb9c6 [MCOMPILER-540] useIncrementalCompilation=false may add generated sources to ...
  • 6e3db9d Bump org.codehaus.plexus:plexus-java from 1.5.1 to 1.5.2
  • 0fe9b84 Remove declaration of "plexus-snapshots" repository (#1010)
  • 35f6800 Bump org.ow2.asm:asm from 9.9 to 9.9.1
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.2.2 to 3.5.5

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.5

🚀 New features and improvements

🐛 Bug Fixes

  • Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258) @​jbliznak. Please note if you are using Windows with Java 8 and not PowerShell (you have options to: use Java 9+, install PowerShell or stay on Surefire 3.5.4)
  • Properly work with test failures caused during beforeAll phase (#3194) @​Frawless

📝 Documentation updates

  • Clarify how late placeholder replacement (@{...}) deals with (#3208) @​kwin

👻 Maintenance

🔧 Build

📦 Dependency updates

  • Bump org.xmlunit:xmlunit-core from 2.10.4 to 2.11.0 (#3209) @dependabot[bot]
  • Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.4.0 to 3.5.1 (#3260) @dependabot[bot]
  • Bump parent from 44 to 47 (#3253) @​slawekjaranowski
  • Bump org.assertj:assertj-core from 3.16.1 to 3.27.7 in /surefire-its/src/test/resources/surefire-1733-testng (#3246) @dependabot[bot]
  • Bump org.assertj:ass...

    Description has been truncated

    Note
    Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Package Dependencies
Ecosystem:
maven
Version Change:
3.2.2 → 3.5.5
Update Type:
Minor
Ecosystem:
maven
Version Change:
4.1.101.Final → 4.2.10.Final
Update Type:
Minor
Ecosystem:
maven
Version Change:
2.0.9 → 2.0.17
Update Type:
Patch
Ecosystem:
maven
Version Change:
5.7.0 → 5.22.0
Update Type:
Minor
Ecosystem:
maven
Version Change:
3.11.0 → 3.15.0
Update Type:
Minor
Ecosystem:
maven
Version Change:
3.6.3 → 3.12.0
Update Type:
Minor
Ecosystem:
maven
Version Change:
0.8.11 → 0.8.14
Update Type:
Patch
Ecosystem:
maven
Version Change:
3.1.0 → 3.2.8
Update Type:
Minor
Ecosystem:
maven
Version Change:
1.34.0 → 1.59.0
Update Type:
Minor
Ecosystem:
maven
Version Change:
2.0.9 → 2.0.17
Update Type:
Patch
Ecosystem:
maven
Version Change:
4.8.3.1 → 4.9.8.2
Update Type:
Minor
Ecosystem:
maven
Version Change:
2.16.0 → 2.21.1
Update Type:
Minor
Ecosystem:
maven
Version Change:
1.6.13 → 1.7.0
Update Type:
Minor
Ecosystem:
maven
Version Change:
3.3.0 → 3.4.0
Update Type:
Minor
Ecosystem:
maven
Version Change:
1.34.0 → 1.59.0
Update Type:
Minor
Ecosystem:
maven
Version Change:
1.12.0 → 1.16.3
Update Type:
Minor
Technical Details
ID: 15425415
UUID: 4008777450
Node ID: PR_kwDORWrgZs7HNKwc
Host: GitHub
Repository: StreamLineLabs/streamline-java-sdk