Skip to content

chore(deps): bump the dependencies group with 3 updates - #395

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/dependencies-f93b39583e
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/dependencies-f93b39583e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 3 updates: io.opentelemetry:opentelemetry-bom, org.mockito:mockito-core and gradle-wrapper.

Updates io.opentelemetry:opentelemetry-bom from 1.65.0 to 1.66.0

Release notes

Sourced from io.opentelemetry:opentelemetry-bom's releases.

Version 1.66.0

API

  • Fix Baggage.fromContext() and Baggage.fromContextOrNull() to handle a null context (#8667)
  • Do not percent-encode W3C baggage metadata (#8682)
  • Fix ArrayIndexOutOfBoundsException in OtelEncodingUtils for invalid hex characters (#8748)

SDK

Traces

  • Record processed spans before export completes and reject new spans on shutdown in SpanProcessor self-observability instrumentation (#8735)

Metrics

  • Improve explicit bucket histogram contention performance (#8717)

Logs

  • Record processed logs before export completes and reject new logs on shutdown in LogRecordProcessor self-observability instrumentation (#8698)

Exporters

  • OTLP: Respect Retry-After in OTLP HTTP senders (#8633)
  • OTLP: Add setEnabledProtocols option to OTLP HTTP exporter builders (#8610)
  • OTLP: Reject mixing keyManager and sslContext in TlsConfigHelper (#8710)
  • OTLP: Fix OkHttpGrpcSender mTLS when using the platform default trust store (#8758)
  • OTLP: Suppress instrumentation of exporter requests in JdkHttpSender (#8757)
  • OTLP: Accept RFC 1123 hostnames in EndpointUtil.validateEndpoint for OkHttp senders (#8746)
  • OTLP: Include the number of affected items in exporter error logging (#8780)
  • OTLP: Add toString to OtlpJsonLogging{Span,Metric,LogRecord}Exporter (#8725)
  • OTLP Profiles: Improve JFR export example and align LinkData null-element handling with the spec (#8349)
  • Prometheus: Remove default host log warning in PrometheusHttpServerBuilder (#8679)
  • Prometheus: Align UCUM byte unit conversions with the specification table (#8752)

Extensions

  • BREAKING Declarative config: Rename generated model POJO setters from with<Prop> to set<Prop> (#8742)
  • Declarative config: Resolve experimental properties on stable APIs in generated model POJOs (#8654)
  • Declarative config: Fix inverted scope_info_enabled and target_info_enabled flags in the Prometheus component provider (#8750)
  • Declarative config: Support output_stream in otlp_file/development (#8676)
  • Incubator: Add toString to ComposableAnnotatingSampler (#8645)

Project tooling

  • Remediate zizmor findings in GitHub Actions workflows (#8592)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-bom's changelog.

Version 1.66.0 (2026-09-11)

API

  • Fix Baggage.fromContext() and Baggage.fromContextOrNull() to handle a null context (#8667)
  • Do not percent-encode W3C baggage metadata (#8682)
  • Fix ArrayIndexOutOfBoundsException in OtelEncodingUtils for invalid hex characters (#8748)

SDK

Traces

  • Record processed spans before export completes and reject new spans on shutdown in SpanProcessor self-observability instrumentation (#8735)

Metrics

  • Improve explicit bucket histogram contention performance (#8717)

Logs

  • Record processed logs before export completes and reject new logs on shutdown in LogRecordProcessor self-observability instrumentation (#8698)

Exporters

  • OTLP: Respect Retry-After in OTLP HTTP senders (#8633)
  • OTLP: Add setEnabledProtocols option to OTLP HTTP exporter builders (#8610)
  • OTLP: Reject mixing keyManager and sslContext in TlsConfigHelper (#8710)
  • OTLP: Fix OkHttpGrpcSender mTLS when using the platform default trust store (#8758)
  • OTLP: Suppress instrumentation of exporter requests in JdkHttpSender (#8757)
  • OTLP: Accept RFC 1123 hostnames in EndpointUtil.validateEndpoint for OkHttp senders (#8746)
  • OTLP: Include the number of affected items in exporter error logging (#8780)
  • OTLP: Add toString to OtlpJsonLogging{Span,Metric,LogRecord}Exporter (#8725)
  • OTLP Profiles: Improve JFR export example and align LinkData null-element handling with the spec (#8349)

... (truncated)

Commits
  • 300a358 [release/v1.66.x] Prepare release 1.66.0 (#8799)
  • dd71106 Prepare for 1.66.0 release (#8795)
  • 9284265 Manual 1.65.0 post release (#8794)
  • 10c7338 Align UCUM byte unit conversions with the specification table (#8752)
  • bf1a64c Accept RFC 1123 hostnames in EndpointUtil.validateEndpoint (#8746)
  • ab72956 Add number of affected items to Exporter error logging (#8780)
  • 275fe92 Update dependency com.squareup.wire:wire-bom to v7 (#8793)
  • 050f481 Remove unused parameter from B3 propagation integration tests (#8791)
  • 8d7bd65 Improve explicit histogram contention performance (#8717)
  • 2c880d9 Rename inverted grpc detection test in GrpcJavaOtlpIntegrationTest (#8790)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-core from 5.23.0 to 5.24.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.24.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.24.0

Commits
  • 5a2f0f8 Fix Mockito docs for -javaagent flag with Gradle (#3866)
  • 9c5f36f Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#3862)
  • e7fd06d Preserve method parameters when clearing inline mocks (#3847)
  • 5a676bc Bump gradle/actions from 6.2.0 to 6.3.0 (#3852)
  • 508f8e7 Bump gradle/actions from 5 to 6.2.0 (#3851)
  • ee8a330 Print object fields via reflection when toString() is not implemented (#3844)
  • 39b1aba Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#3845)
  • d8638e1 Migrate extensions-tests to JUnit Jupiter (#3840)
  • 0aab922 Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#3839)
  • f3cf74c docs(when-verify): fixes to explanations about redundancy (#3838)
  • Additional commits viewable in compare view

Updates gradle-wrapper from 9.7.1 to 9.8.0

Release notes

Sourced from gradle-wrapper's releases.

9.8.0

The Gradle team is excited to announce Gradle 9.8.0.

Here are the highlights of this release:

  • Java 27 support
  • Maven mirror settings reuse
  • Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.8.0 RC3

The Gradle team is excited to announce Gradle 9.8.0 RC3.

Here are the highlights of this release:

... (truncated)

Commits
  • a927be5 Add the Develocity plugin back to the Android smoke tests (#39273)
  • eaee500 Add the Develocity plugin back to the Android smoke tests
  • 189b672 Route everything still hitting Maven Central through the mirror (#39257)
  • 36b1814 Add back mavenCentral to doc snippets
  • 2740c2d Update Gradle wrapper to version 9.8.0-rc-3 (#39264)
  • 2099383 Update Gradle wrapper to version 9.8.0-rc-3
  • c80202f Route everything still hitting Maven Central through the mirror
  • 3f6a534 Fix when a best practice was introduced (#39253)
  • 9efc9ed Fix when a best practice was introduced
  • 459e143 Route integration test dependencies through the repository mirror (#39239)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 3 updates: [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java), [org.mockito:mockito-core](https://github.com/mockito/mockito) and [gradle-wrapper](https://github.com/gradle/gradle).


Updates `io.opentelemetry:opentelemetry-bom` from 1.65.0 to 1.66.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.65.0...v1.66.0)

Updates `org.mockito:mockito-core` from 5.23.0 to 5.24.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.23.0...v5.24.0)

Updates `gradle-wrapper` from 9.7.1 to 9.8.0
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.7.1...v9.8.0)

---
updated-dependencies:
- dependency-name: io.opentelemetry:opentelemetry-bom
  dependency-version: 1.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: gradle-wrapper
  dependency-version: 9.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 1, 2026 05:42
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 1, 2026
@coderabbitai

coderabbitai Bot commented Oct 1, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: f7e25f95-e376-483f-97e4-afc968416ee4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant