Skip to content

Bump the all-dependencies group across 1 directory with 18 updates#734

Merged
trask merged 1 commit intomainfrom
dependabot/maven/all-dependencies-fb8bd7d875
Oct 20, 2025
Merged

Bump the all-dependencies group across 1 directory with 18 updates#734
trask merged 1 commit intomainfrom
dependabot/maven/all-dependencies-fb8bd7d875

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Oct 20, 2025

Bumps the all-dependencies group with 18 updates in the / directory:

Package From To
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha 2.20.1-alpha 2.21.0-alpha
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom 2.20.1 2.21.0
org.apache.maven.plugins:maven-dependency-plugin 3.8.1 3.9.0
io.opentelemetry:opentelemetry-api 1.54.1 1.55.0
io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations 2.20.1 2.21.0
io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17 2.20.1-alpha 2.21.0-alpha
ch.qos.logback:logback-core 1.5.18 1.5.20
ch.qos.logback:logback-classic 1.5.18 1.5.20
org.junit.jupiter:junit-jupiter-api 5.13.4 6.0.0
org.junit.jupiter:junit-jupiter-engine 5.13.4 6.0.0
io.micrometer:micrometer-core 1.15.4 1.15.5
io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi 1.54.1 1.55.0
io.opentelemetry.instrumentation:opentelemetry-instrumentation-api 2.20.1 2.21.0
io.opentelemetry.javaagent:opentelemetry-javaagent-extension-api 2.20.1-alpha 2.21.0-alpha
io.opentelemetry:opentelemetry-sdk-common 1.54.1 1.55.0
io.opentelemetry:opentelemetry-sdk-trace 1.54.1 1.55.0
com.azure:azure-core 1.56.1 1.57.0
com.azure:azure-core-http-netty 1.16.1 1.16.2

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha from 2.20.1-alpha to 2.21.0-alpha

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's releases.

Version 2.20.1

This is a patch release on the previous 2.20.0 release, fixing the issue(s) below.

🛠️ Bug fixes

  • Backport: Update the OpenTelemetry SDK version to 1.54.1 (#14720)
Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's changelog.

Changelog

Unreleased

Version 2.21.0 (2025-10-17)

⚠️ Breaking Changes

  • Hadoop JMX metrics have been renamed to align with semantic conventions. If you are using Hadoop JMX metrics, you will need to update your dashboards and alerts. (#14411)
  • Lettuce 5.1 instrumentation now aligns with other instrumentations and no longer sets the span status description. (#14886)

🚫 Deprecations

  • The following Logback appender configuration properties have been renamed for clarity. The old property names have been deprecated and will be removed in a future release:
    • Java agent: otel.instrumentation.logback-appender.experimental.capture-logstash-attributes → otel.instrumentation.logback-appender.experimental.capture-logstash-marker-attributes
    • Spring Boot starterotel.instrumentation.logback-appender.experimental.capture-logstash-markers → otel.instrumentation.logback-appender.experimental.capture-logstash-marker-attributes
    • Logback appender configuration property: captureLogstashAttributes → captureLogstashMarkerAttributes
    • Logback appender API: setCaptureLogstashAttributes() → setCaptureLogstashMarkerAttributes() (#14959)

🌟 New javaagent instrumentation

  • Add Helidon instrumentation (#13776)
  • Add NATS instrumentation (#13999)
  • OpenSearch Transport v3.0 Implementation (#14823)
  • Add Kafka Connect API instrumentation (#14478)

🌟 New library instrumentation

📈 Enhancements

  • Add experimental sqlcommenter support for JDBC and R2DBC

... (truncated)

Commits

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom from 2.20.1 to 2.21.0

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom's releases.

Version 2.21.0

This release targets the OpenTelemetry SDK 1.55.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

⚠️ Breaking Changes

  • Hadoop JMX metrics have been renamed to align with semantic conventions. If you are using Hadoop JMX metrics, you will need to update your dashboards and alerts. (#14411)
  • Lettuce 5.1 instrumentation now aligns with other instrumentations and no longer sets the span status description. (#14886)

🚫 Deprecations

  • The following Logback appender configuration properties have been renamed for clarity. The old property names have been deprecated and will be removed in a future release: - Java agent: otel.instrumentation.logback-appender.experimental.capture-logstash-attributes → otel.instrumentation.logback-appender.experimental.capture-logstash-marker-attributes - Spring Boot starterotel.instrumentation.logback-appender.experimental.capture-logstash-markers → otel.instrumentation.logback-appender.experimental.capture-logstash-marker-attributes - Logback appender configuration property: captureLogstashAttributes → captureLogstashMarkerAttributes - Logback appender API: setCaptureLogstashAttributes() → setCaptureLogstashMarkerAttributes() (#14959)

🌟 New javaagent instrumentation

  • Add Helidon instrumentation (#13776)
  • Add NATS instrumentation (#13999)
  • OpenSearch Transport v3.0 Implementation (#14823)
  • Add Kafka Connect API instrumentation (#14478)

🌟 New library instrumentation

📈 Enhancements

  • Add experimental sqlcommenter support for JDBC and R2DBC (#13714)
  • Align Hadoop JMX metrics with semantic conventions (#14411)
  • Introduce experimental API for operation attributes to be passed only to OperationListeners (#14590)
  • Add span logging support for declarative configuration (#14591)
  • Add span logging support for Spring Boot starter (#14594)
  • Support capturing event names in logback, log4j, and jboss-logmanager appenders (#14649)
  • Include contrib sampler in java agent, e.g. for filtering health check endpoints (#14677)
  • Collect RPC metrics in Apache Dubbo instrumentation (#14690)
  • Add experimental option to disable noisy redis.encode span events in Lettuce instrumentation (#14750)
  • Support ListIterator in Kafka consumer instrumentation for Spark Structured Streaming (#14757)
  • Exclude wrapper classes in JDBC instrumentation (#14760)
  • Support JDBC URL parsing for OceanBase, PolarDB, and Lindorm databases (#14790)
  • Support context propagation in Guava AsyncEventBus (#14791)
  • Make db.statement attribute available during sampling in Lettuce instrumentation (#14856)
  • Add code.namespace and code.function attributes to Vaadin controller spans (#14882)
  • Add code.namespace and code.function attributes to Grails controller spans (#14885)
  • Support Hibernate 7.2.0.CR1 (#14921)
  • Support capturing Logstash StructuredArguments as log record attributes (#14959)
  • Add gRPC request/response size metrics (#14342)

🛠️ Bug fixes

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom's changelog.

Version 2.21.0 (2025-10-17)

⚠️ Breaking Changes

  • Hadoop JMX metrics have been renamed to align with semantic conventions. If you are using Hadoop JMX metrics, you will need to update your dashboards and alerts. (#14411)
  • Lettuce 5.1 instrumentation now aligns with other instrumentations and no longer sets the span status description. (#14886)

🚫 Deprecations

  • The following Logback appender configuration properties have been renamed for clarity. The old property names have been deprecated and will be removed in a future release:
    • Java agent: otel.instrumentation.logback-appender.experimental.capture-logstash-attributes → otel.instrumentation.logback-appender.experimental.capture-logstash-marker-attributes
    • Spring Boot starterotel.instrumentation.logback-appender.experimental.capture-logstash-markers → otel.instrumentation.logback-appender.experimental.capture-logstash-marker-attributes
    • Logback appender configuration property: captureLogstashAttributes → captureLogstashMarkerAttributes
    • Logback appender API: setCaptureLogstashAttributes() → setCaptureLogstashMarkerAttributes() (#14959)

🌟 New javaagent instrumentation

  • Add Helidon instrumentation (#13776)
  • Add NATS instrumentation (#13999)
  • OpenSearch Transport v3.0 Implementation (#14823)
  • Add Kafka Connect API instrumentation (#14478)

🌟 New library instrumentation

📈 Enhancements

  • Add experimental sqlcommenter support for JDBC and R2DBC (#13714)
  • Align Hadoop JMX metrics with semantic conventions (#14411)
  • Introduce experimental API for operation attributes to be passed only to OperationListeners

... (truncated)

Commits

Updates org.apache.maven.plugins:maven-dependency-plugin from 3.8.1 to 3.9.0

Release notes

Sourced from org.apache.maven.plugins:maven-dependency-plugin's releases.

3.9.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 826e5f0 [maven-release-plugin] prepare release maven-dependency-plugin-3.9.0
  • 0db1acc Use Resolver API in go-offline for dependencies resolving (#1533)
  • e50031a Use Resolver API in go-offline for plugins resolving
  • 6ed4b1a Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0
  • 8776c61 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
  • d2af78e Ignore Mockito 5.x and SLF4j 2.x by dependabot
  • dcd4b7d Bump org.assertj:assertj-core from 3.27.4 to 3.27.5
  • 7523948 Strict check of dependencies usage
  • 23186d4 Fixes #1522, add render-dependencies mojo (#1523)
  • bc1893f Use Resolver API in resolve-plugin
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-api from 1.54.1 to 1.55.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.55.0

API

Common

  • Improve GraalVM native image compatibility (#7160)

Traces

  • Fix TraceState key validation limits to match W3C specification (#7575)

Incubator

  • Add ExtendedOpenTelemetry API (#7496)
  • Add incubator implementation of composite sampling specification (#7626)

SDK

Traces

  • Proactively avoid Unsafe on Java 23+ to avoid triggering JVM warning message (#7691)

Metrics

  • Add setMeterConfigurator() support to MeterProvider (incubating API) (#7346)

Exporters

  • OTLP: Configure metric exporter to use SDK's MeterProvider for internal metrics (#7541)
  • OTLP: Suppress logging of InterruptedException from managed OkHttp threads (#7565)
  • OTLP: Update dependency from okhttp-jvm back to okhttp for Gradle users, preserving okhttp-jvm for Maven users (#7681)
  • Prometheus: Remove separate otel_scope_info metric and always add scope labels to data points (#7398)
  • Prometheus: Update exporter dependencies to use protobuf-free formats (#7664)

Profiling

  • Update profiles exporter to support proto v1.8.0-alpha changes (#7638)
  • Add abstractions to assist with dictionary table assembly (#7717)
  • Add abstractions to assist with sample composition (#7727)

Extensions

  • Autoconfigure: Improve exception logging when running in Maven (#7336)
  • Declarative configuration: Return Resource (#7639)
  • Declarative configuration: Invoke auto-configure listeners (#7654)
  • Declarative configuration: Add logging when incompatible types are found (#7693)

Shims

OpenTracing Shim

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.55.0 (2025-10-13)

API

Common

  • Improve GraalVM native image compatibility (#7160)

Traces

  • Fix TraceState key validation limits to match W3C specification (#7575)

Incubator

  • Add ExtendedOpenTelemetry API (#7496)
  • Add incubator implementation of composite sampling specification (#7626)

SDK

Traces

  • Proactively avoid Unsafe on Java 23+ to avoid triggering JVM warning message (#7691)

Metrics

  • Add setMeterConfigurator() support to MeterProvider (incubating API) (#7346)

Exporters

  • OTLP: Configure metric exporter to use SDK's MeterProvider for internal metrics (#7541)
  • OTLP: Suppress logging of InterruptedException from managed OkHttp threads (#7565)
  • OTLP: Update dependency from okhttp-jvm back to okhttp for Gradle users, preserving okhttp-jvm for Maven users (#7681)
  • Prometheus: Remove separate otel_scope_info metric and always add scope labels to data points (#7398)
  • Prometheus: Update exporter dependencies to use protobuf-free formats (#7664)

Profiling

  • Update profiles exporter to support proto v1.8.0-alpha changes

... (truncated)

Commits
  • f612423 [release/v1.55.x] Prepare release 1.55.0 (#7752)
  • 4268621 fix(deps): update dependency com.squareup.okio:okio-bom to v3.16.1 (#7738)
  • 29f8b09 Clear context class loader from started threads (#7488)
  • a00f6a8 Update change log for upcoming release (#7744)
  • 926da40 chore(deps): update plugin com.gradle.develocity to v4.2.2 (#7750)
  • 4a11b72 fix(deps): update dependency com.gradle.develocity:com.gradle.develocity.grad...
  • d91425b fix(deps): update dependency org.owasp:dependency-check-gradle to v12.1.7 (#7...
  • 58b5699 chore(deps): update github/codeql-action action to v4 (#7749)
  • 6204e2c fix(deps): update dependency jacoco to v0.8.14 (#7746)
  • 74802e8 fix(deps): update dependency checkstyle to v12.0.1 (#7745)
  • Additional commits viewable in compare view

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations from 2.20.1 to 2.21.0

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations's releases.

Version 2.21.0

This release targets the OpenTelemetry SDK 1.55.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

⚠️ Breaking Changes

  • Hadoop JMX metrics have been renamed to align with semantic conventions. If you are using Hadoop JMX metrics, you will need to update your dashboards and alerts. (#14411)
  • Lettuce 5.1 instrumentation now aligns with other instrumentations and no longer sets the span status description. (#14886)

🚫 Deprecations

  • The following Logback appender configuration properties have been renamed for clarity. The old property names have been deprecated and will be removed in a future release: - Java agent: otel.instrumentation.logback-appender.experimental.capture-logstash-attributes → otel.instrumentation.logback-appender.experimental.capture-logstash-marker-attributes - Spring Boot starterotel.instrumentation.logback-appender.experimental.capture-logstash-markers → otel.instrumentation.logback-appender.experimental.capture-logstash-marker-attributes - Logback appender configuration property: captureLogstashAttributes → captureLogstashMarkerAttributes - Logback appender API: setCaptureLogstashAttributes() → setCaptureLogstashMarkerAttributes() (#14959)

🌟 New javaagent instrumentation

  • Add Helidon instrumentation (#13776)
  • Add NATS instrumentation (#13999)
  • OpenSearch Transport v3.0 Implementation (#14823)
  • Add Kafka Connect API instrumentation (#14478)

🌟 New library instrumentation

📈 Enhancements

  • Add experimental sqlcommenter support for JDBC and R2DBC (#13714)
  • Align Hadoop JMX metrics with semantic conventions (#14411)
  • Introduce experimental API for operation attributes to be passed only to OperationListeners (#14590)
  • Add span logging support for declarative configuration (#14591)
  • Add span logging support for Spring Boot starter (#14594)
  • Support capturing event names in logback, log4j, and jboss-logmanager appenders (#14649)
  • Include contrib sampler in java agent, e.g. for filtering health check endpoints (#14677)
  • Collect RPC metrics in Apache Dubbo instrumentation (#14690)
  • Add experimental option to disable noisy redis.encode span events in Lettuce instrumentation (#14750)
  • Support ListIterator in Kafka consumer instrumentation for Spark Structured Streaming (#14757)
  • Exclude wrapper classes in JDBC instrumentation (#14760)
  • Support JDBC URL parsing for OceanBase, PolarDB, and Lindorm databases (#14790)
  • Support context propagation in Guava AsyncEventBus (#14791)
  • Make db.statement attribute available during sampling in Lettuce instrumentation (#14856)
  • Add code.namespace and code.function attributes to Vaadin controller spans (#14882)
  • Add code.namespace and code.function attributes to Grails controller spans (#14885)
  • Support Hibernate 7.2.0.CR1 (#14921)
  • Support capturing Logstash StructuredArguments as log record attributes (#14959)
  • Add gRPC request/response size metrics (#14342)

🛠️ Bug fixes

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations's changelog.

Version 2.21.0 (2025-10-17)

⚠️ Breaking Changes

  • Hadoop JMX metrics have been renamed to align with semantic conventions. If you are using Hadoop JMX metrics, you will need to update your dashboards and alerts. (#14411)
  • Lettuce 5.1 instrumentation now aligns with other instrumentations and no longer sets the span status description. (#14886)

🚫 Deprecations

  • The following Logback appender configuration properties have been renamed for clarity. The old property names have been deprecated and will be removed in a future release:
    • Java agent: otel.instrumentation.logback-appender.experimental.capture-logstash-attributes → otel.instrumentation.logback-appender.experimental.capture-logstash-marker-attributes
    • Spring Boot starterotel.instrumentation.logback-appender.experimental.capture-logstash-markers → otel.instrumentation.logback-appender.experimental.capture-logstash-marker-attributes
    • Logback appender configuration property: captureLogstashAttributes → captureLogstashMarkerAttributes
    • Logback appender API: setCaptureLogstashAttributes() → setCaptureLogstashMarkerAttributes() (#14959)

🌟 New javaagent instrumentation

  • Add Helidon instrumentation (#13776)
  • Add NATS instrumentation (#13999)
  • OpenSearch Transport v3.0 Implementation (#14823)
  • Add Kafka Connect API instrumentation (#14478)

🌟 New library instrumentation

📈 Enhancements

  • Add experimental sqlcommenter support for JDBC and R2DBC (#13714)
  • Align Hadoop JMX metrics with semantic conventions (#14411)
  • Introduce experimental API for operation attributes to be passed only to OperationListeners

... (truncated)

Commits

Updates io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17 from 2.20.1-alpha to 2.21.0-alpha

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17's releases.

Version 2.20.1

This is a patch release on the previous 2.20.0 release, fixing the issue(s) below.

🛠️ Bug fixes

  • Backport: Update the OpenTelemetry SDK version to 1.54.1 (#14720)
Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17's changelog.

Changelog

Unreleased

Version 2.21.0 (2025-10-17)

⚠️ Breaking Changes

  • Hadoop JMX metrics have been renamed to align with semantic conventions. If you are using Hadoop JMX metrics, you will need to update your dashboards and alerts. (#14411)
  • Lettuce 5.1 instrumentation now aligns with other instrumentations and no longer sets the span status description. (#14886)

🚫 Deprecations

  • The following Logback appender configuration properties have been renamed for clarity. The old property names have been deprecated and will be removed in a future release:
    • Java agent: otel.instrumentation.logback-appender.experimental.capture-logstash-attributes → otel.instrumentation.logback-appender.experimental.capture-logstash-marker-attributes
    • Spring Boot starterotel.instrumentation.logback-appender.experimental.capture-logstash-markers → otel.instrumentation.logback-appender.experimental.capture-logstash-marker-attributes
    • Logback appender configuration property: captureLogstashAttributes → captureLogstashMarkerAttributes
    • Logback appender API: setCaptureLogstashAttributes() → setCaptureLogstashMarkerAttributes() (#14959)

🌟 New javaagent instrumentation

  • Add Helidon instrumentation (#13776)
  • Add NATS instrumentation (#13999)
  • OpenSearch Transport v3.0 Implementation (#14823)
  • Add Kafka Connect API instrumentation (#14478)

🌟 New library instrumentation

📈 Enhancements

  • Add experimental sqlcommenter support for JDBC and R2DBC

... (truncated)

Commits

Updates ch.qos.logback:logback-core from 1.5.18 to 1.5.20

Release notes

Sourced from ch.qos.logback:logback-core's releases.

Logback 1.5.19

2025-09-30 Release of logback version 1.5.19

• Disallow "new" operator in the condition attribute of <if> elements. This fixes an ACE vulnerability recorded as CVE-2025-11226.

• At initialization time, slightly better reporting about watched configuration files.

• Softer message regarding usage of ConsoleAppender and its potential impact on performance.

• In ViewStatusMessagesServlet, restrict processing of "Clear" button to POST method. This change was proposed by Ralf Wiebicke who also provided the relevant PR.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit e572d4f87f06674788eb3ca7148e8d1dffc615fa associated with the tag v_1.5.19. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • 930fb15 prepare release 1.5.20
  • 0b4432a provide an alternative to Janino based conditional configuration processing -...
  • 258558f provide an alternative to Janino based conditional configuration processing -...
  • ee77a70 provide an alternative to Janino based conditional configuration processing -...
  • 5ca7ce8 provide an alternative to Janino based conditional configuration processing -...
  • 728803f fix typo
  • aa5eeb1 start work on version 1.5.20-SNAPSHOT
  • e572d4f skip deployment of blackbox and example modules, published as version 1.5.9
  • 4adae8b add plugin for Maven Central deployment
  • ee70cf4 prepare release 1.5.19
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.18 to 1.5.20

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.19

2025-09-30 Release of logback version 1.5.19

• Disallow "new" operator in the condition attribute of <if> elements. This fixes an ACE vulnerability recorded as CVE-2025-11226.

• At initialization time, slightly better reporting about watched configuration files.

• Softer message regarding usage of ConsoleAppender and its p...

Description has been truncated

@dependabot
Bump the all-dependencies group across 1 directory with 18 updates
4162617 
Bumps the all-dependencies group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.20.1-alpha` | `2.21.0-alpha` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.20.1` | `2.21.0` |
| [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.8.1` | `3.9.0` |
| [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.54.1` | `1.55.0` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.20.1` | `2.21.0` |
| [io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.20.1-alpha` | `2.21.0-alpha` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.18` | `1.5.20` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.18` | `1.5.20` |
| [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `5.13.4` | `6.0.0` |
| [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework) | `5.13.4` | `6.0.0` |
| [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) | `1.15.4` | `1.15.5` |
| [io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi](https://github.com/open-telemetry/opentelemetry-java) | `1.54.1` | `1.55.0` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-api](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.20.1` | `2.21.0` |
| [io.opentelemetry.javaagent:opentelemetry-javaagent-extension-api](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.20.1-alpha` | `2.21.0-alpha` |
| [io.opentelemetry:opentelemetry-sdk-common](https://github.com/open-telemetry/opentelemetry-java) | `1.54.1` | `1.55.0` |
| [io.opentelemetry:opentelemetry-sdk-trace](https://github.com/open-telemetry/opentelemetry-java) | `1.54.1` | `1.55.0` |
| [com.azure:azure-core](https://github.com/Azure/azure-sdk-for-java) | `1.56.1` | `1.57.0` |
| [com.azure:azure-core-http-netty](https://github.com/Azure/azure-sdk-for-java) | `1.16.1` | `1.16.2` |



Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha` from 2.20.1-alpha to 2.21.0-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom` from 2.20.1 to 2.21.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java-instrumentation@v2.20.1...v2.21.0)

Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.8.1 to 3.9.0
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.8.1...maven-dependency-plugin-3.9.0)

Updates `io.opentelemetry:opentelemetry-api` from 1.54.1 to 1.55.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.54.1...v1.55.0)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations` from 2.20.1 to 2.21.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java-instrumentation@v2.20.1...v2.21.0)

Updates `io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17` from 2.20.1-alpha to 2.21.0-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits)

Updates `ch.qos.logback:logback-core` from 1.5.18 to 1.5.20
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.18...v_1.5.20)

Updates `ch.qos.logback:logback-classic` from 1.5.18 to 1.5.20
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.18...v_1.5.20)

Updates `org.junit.jupiter:junit-jupiter-api` from 5.13.4 to 6.0.0
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.4...r6.0.0)

Updates `org.junit.jupiter:junit-jupiter-engine` from 5.13.4 to 6.0.0
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.4...r6.0.0)

Updates `io.micrometer:micrometer-core` from 1.15.4 to 1.15.5
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.15.4...v1.15.5)

Updates `io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi` from 1.54.1 to 1.55.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.54.1...v1.55.0)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-api` from 2.20.1 to 2.21.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java-instrumentation@v2.20.1...v2.21.0)

Updates `io.opentelemetry.javaagent:opentelemetry-javaagent-extension-api` from 2.20.1-alpha to 2.21.0-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits)

Updates `io.opentelemetry:opentelemetry-sdk-common` from 1.54.1 to 1.55.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.54.1...v1.55.0)

Updates `io.opentelemetry:opentelemetry-sdk-trace` from 1.54.1 to 1.55.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.54.1...v1.55.0)

Updates `com.azure:azure-core` from 1.56.1 to 1.57.0
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@azure-core_1.56.1...azure-core_1.57.0)

Updates `com.azure:azure-core-http-netty` from 1.16.1 to 1.16.2
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@azure-identity_1.16.1...azure-identity_1.16.2)

---
updated-dependencies:
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha
  dependency-version: 2.21.0-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17
  dependency-version: 2.21.0-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-api
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: io.micrometer:micrometer-core
  dependency-version: 1.15.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi
  dependency-version: 1.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-api
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.javaagent:opentelemetry-javaagent-extension-api
  dependency-version: 2.21.0-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk-common
  dependency-version: 1.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk-trace
  dependency-version: 1.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.azure:azure-core
  dependency-version: 1.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.azure:azure-core-http-netty
  dependency-version: 1.16.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 20, 2025
@dependabot dependabot Bot requested a review from harsimar as a code owner October 20, 2025 14:38
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 20, 2025
@dependabot dependabot Bot added the java Pull requests that update Java code label Oct 20, 2025
@dependabot dependabot Bot requested review from ramthi and trask as code owners October 20, 2025 14:38
@trask trask merged commit e851fdb into main Oct 20, 2025
2 checks passed
@trask trask deleted the dependabot/maven/all-dependencies-fb8bd7d875 branch October 20, 2025 17:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@trask trask trask approved these changes

@harsimar harsimar Awaiting requested review from harsimar harsimar is a code owner

@heyams heyams Awaiting requested review from heyams heyams is a code owner

@jeanbisutti jeanbisutti Awaiting requested review from jeanbisutti jeanbisutti is a code owner

@ramthi ramthi Awaiting requested review from ramthi ramthi is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@trask