Skip to content

Bump the all-dependencies group across 1 directory with 25 updates#745

Merged
trask merged 1 commit intomainfrom
dependabot/maven/all-dependencies-45e382aeb2
Jan 5, 2026
Merged

Bump the all-dependencies group across 1 directory with 25 updates#745
trask merged 1 commit intomainfrom
dependabot/maven/all-dependencies-45e382aeb2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 22, 2025 •
edited
Loading

Bumps the all-dependencies group with 25 updates in the / directory:

Package From To
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha 2.21.0-alpha 2.23.0-alpha
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom 2.21.0 2.23.0
com.microsoft.azure:applicationinsights-agent 3.7.5 3.7.6
org.springframework.boot:spring-boot-maven-plugin 3.5.6 4.0.1
io.opentelemetry:opentelemetry-api 1.55.0 1.57.0
io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations 2.21.0 2.23.0
com.microsoft.azure:applicationinsights-web 3.7.5 3.7.6
io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17 2.21.0-alpha 2.23.0-alpha
org.apache.logging.log4j:log4j-api 2.25.2 2.25.3
org.apache.logging.log4j:log4j-core 2.25.2 2.25.3
ch.qos.logback:logback-core 1.5.20 1.5.23
ch.qos.logback:logback-classic 1.5.20 1.5.23
org.junit.jupiter:junit-jupiter-api 6.0.0 6.0.1
org.junit.jupiter:junit-jupiter-engine 6.0.0 6.0.1
org.apache.logging.log4j:log4j-slf4j2-impl 2.25.2 2.25.3
org.apache.logging.log4j:log4j-slf4j-impl 2.25.2 2.25.3
io.micrometer:micrometer-core 1.15.5 1.16.1
io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi 1.55.0 1.57.0
io.opentelemetry.instrumentation:opentelemetry-instrumentation-api 2.21.0 2.23.0
io.opentelemetry.javaagent:opentelemetry-javaagent-extension-api 2.21.0-alpha 2.23.0-alpha
org.apache.maven.plugins:maven-resources-plugin 3.3.1 3.4.0
io.opentelemetry:opentelemetry-sdk-common 1.55.0 1.57.0
io.opentelemetry:opentelemetry-sdk-trace 1.55.0 1.57.0
org.springframework.boot:spring-boot-autoconfigure 3.5.6 4.0.1
com.microsoft.azure:applicationinsights-runtime-attach 3.7.5 3.7.6

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha from 2.21.0-alpha to 2.23.0-alpha

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's releases.

Version 2.22.0

This release targets the OpenTelemetry SDK 1.56.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

⚠️ Breaking Changes

  • AWS SDK 2.x attributes updated to align with semantic conventions (#15028) - The following attributes have been renamed: - aws.bucket.name (S3) → aws.s3.bucket - aws.queue.url (SQS) → aws.sqs.queue.url - aws.stream.name (Kinesis) → aws.kinesis.stream_name - aws.table.name (DynamoDB) → aws.dynamodb.table_names - aws.dynamodb.provisioned_throughput.read_capacity_units → aws.dynamodb.provisioned_read_capacity (type changed from long to double) - aws.dynamodb.provisioned_throughput.write_capacity_units → aws.dynamodb.provisioned_write_capacity (type changed from long to double) - aws.dynamodb.exclusive_start_table_name → aws.dynamodb.exclusive_start_table - aws.dynamodb.projection_expression → aws.dynamodb.projection - aws.dynamodb.scan_index_forward → aws.dynamodb.scan_forward - The following attribute types have changed: - aws.dynamodb.table_names: string → string[] - aws.dynamodb.consumed_capacity: string → string[] - aws.dynamodb.global_secondary_indexes: string → string[] - aws.dynamodb.local_secondary_indexes: string → string[] - aws.dynamodb.consistent_read: string → boolean - aws.dynamodb.table_count: string → long - aws.dynamodb.limit: string → long - aws.dynamodb.attributes_to_get: string → string[] - aws.dynamodb.segment: string → long - aws.dynamodb.total_segments: string → long - aws.dynamodb.count: string → long - aws.dynamodb.scanned_count: string → long - The following attributes are no longer emitted by default but can be enabled with otel.instrumentation.aws-sdk.experimental-span-attributes=true: - aws.queue.name (SQS) - aws.lambda.function.name (Lambda) - aws.lambda.function.arn (Lambda)
  • JDBC library data source instrumentation now disabled by default (#15074)
  • JMX state metrics unit changed from empty string to 1 to align with semantic conventions (#15093)
  • AWS SDK 1.x attributes updated to align with semantic conventions (#15094) - Only affects users with otel.instrumentation.aws-sdk.experimental-span-attributes=true - The following attributes have been renamed and are now emitted by default (no experimental flag required): - aws.bucket.name (S3) → aws.s3.bucket - aws.queue.url (SQS) → aws.sqs.queue.url - aws.stream.name (Kinesis) → aws.kinesis.stream_name - aws.table.name (DynamoDB) → aws.dynamodb.table_names
  • Finatra controller spans now disabled by default to match other controller spans (#15118)
  • Netty HTTP request wrapper class renamed from HttpRequestAndChannel to NettyRequest (#15247)
  • JSP compile spans now disabled by default to match other view spans (#15261)

🚫 Deprecations

  • TracingConsumerInterceptor and TracingProducerInterceptor deprecated in favor of new configurable interceptors (#14929)
  • Various builder methods updated to use UnaryOperator instead of Function<X, X> (#15101)
  • DbClientCommonAttributesGetter deprecated in favor of DbClientAttributesGetter (#15139)

🌟 New javaagent instrumentation

  • Add JFinal instrumentation (#15216)

📈 Enhancements

  • Avoid Unsafe usage on Java 23+ (#14855, #15091)
  • Update Azure SDK instrumentation so az.namespace can be used for sampling (#15068)
  • Spring Boot Starter: Add cache to reduce environment variable lookups (#15132)
  • HTTP instrumentations now emit semantic convention schema URL (#15144)
  • Added instrumentation support for AsyncHttpClient version 1.8 (#15195)
  • Instrumenter customizer now receives instrumentation type (#15227)
  • Added support for Spring Framework 7.0 (#15287, #15299, #15301, #15304, #15311, #15362, #15371)
  • Added span status customizer to incubating InstrumenterCustomizer API (#15288)
  • Added configuration options for sqlcommenter (#15169)
  • GraphQL instrumentation now records data fetcher errors (#15289)
  • Add http client url template customizer (#15217)
  • Introduce idiomatic JmxTelemetry API for JMX metrics library (#15220)
  • Add instrumentation for OpenTelemetry API incubator's ExtendedOpenTelemetry (#15178)

🛠️ Bug fixes

  • Fix missing peer.service in Netty HTTP spans (#14963)
  • Fix Couchbase span kind to be CLIENT instead of INTERNAL (#14995)
  • Link attributes are now bridged to the Java agent when using OpenTelemetry API (#15143)
  • Potential race condition in JFR runtime metrics initialization fixed (#15231)
  • Regression fixed related to context propagation when using Spring @EnableAsync (#15249)
  • Declarative configuration now uses snake_case for distro resource provider attribute name (#15260)
  • Logback appender fixed to capture Logstash StructuredArguments.entries() (#15341)

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's changelog.

Changelog

Unreleased

Version 2.23.0 (2025-12-13)

⚠️ Breaking Changes

  • ActiveMQ Classic JMX metrics: rename attributes and metrics to align with semantic conventions (see PR description for specifics) (#14996)
  • Library instrumentation: remove previously deprecated methods from telemetry builders (#15324)
  • Logback: captureArguments no longer captures message template, use captureTemplate (#15423)
  • Play: disable controller spans by default, re-enable with otel.instrumentation.common.experimental.controller-telemetry.enabled=true (#15604)

🚫 Deprecations

  • Library instrumentation: deprecate setSpanNameExtractor() and setStatusExtractor() in favor of setSpanNameExtractorCustomizer() and setStatusExtractorCustomizer() (#15529)

🌟 New javaagent instrumentation

🌟 New library instrumentation

📈 Enhancements

  • Spring starter: add declarative config logging exporter (#14917)
  • Failsafe: add support for RetryPolicy (#15255, #15537)
  • GraphQL: add option to disable capturing query documents (#15384)
  • JMX metrics: allow any classpath resource path in rules (#15413)
  • Spring Boot actuator autoconfigure: support Spring Boot 4 (#15433)

... (truncated)

Commits

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom from 2.21.0 to 2.23.0

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom's releases.

Version 2.23.0

This release targets the OpenTelemetry SDK 1.57.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

⚠️ Breaking Changes

  • ActiveMQ Classic JMX metrics: rename attributes and metrics to align with semantic conventions (see PR description for specifics) (#14996)
  • Library instrumentation: remove previously deprecated methods from telemetry builders (#15324)
  • Logback: captureArguments no longer captures message template, use captureTemplate (#15423)
  • Play: disable controller spans by default, re-enable with otel.instrumentation.common.experimental.controller-telemetry.enabled=true (#15604)

🚫 Deprecations

  • Library instrumentation: deprecate setSpanNameExtractor() and setStatusExtractor() in favor of setSpanNameExtractorCustomizer() and setStatusExtractorCustomizer() (#15529)

🌟 New javaagent instrumentation

🌟 New library instrumentation

📈 Enhancements

  • Spring starter: add declarative config logging exporter (#14917)
  • Failsafe: add support for RetryPolicy (#15255, #15537)
  • GraphQL: add option to disable capturing query documents (#15384)
  • JMX metrics: allow any classpath resource path in rules (#15413)
  • Spring Boot actuator autoconfigure: support Spring Boot 4 (#15433)
  • Spring JMS: support Spring Boot 4 (#15434)
  • Spring starter: support Spring Boot 4 (#15459)
  • Lettuce: support custom ClientResources (#15470)
  • Lettuce: add reactor-core compatibility checker (#15472)
  • Servlet: propagate context explicitly for async runnables (#15476)
  • Servlet: always add trace_id and span_id attributes to requests (#15485)
  • Pekko HTTP: separate route instrumentation from HTTP server instrumentation (#15499)
  • MongoDB: emit versioned scope name (#15500)
  • Spring WebFlux: support Spring Boot 4 (#15502, #15574)
  • Spring WebMVC: support Spring Boot 4 (#15525)
  • Spring Cloud Gateway: support Spring Boot 4 (#15540)
  • Spring starter: add missing Kafka configuration options (#15592)
  • OpenTelemetry API interop: support new GlobalOpenTelemetry methods introduced in 1.57 (#15620)

🛠️ Bug fixes

  • Spring Web/WebFlux: restore GraalVM native-image compatibility (#15306)
  • Spring Kafka: end span in afterRecord callback (#15367)

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom's changelog.

Version 2.23.0 (2025-12-13)

⚠️ Breaking Changes

  • ActiveMQ Classic JMX metrics: rename attributes and metrics to align with semantic conventions (see PR description for specifics) (#14996)
  • Library instrumentation: remove previously deprecated methods from telemetry builders (#15324)
  • Logback: captureArguments no longer captures message template, use captureTemplate (#15423)
  • Play: disable controller spans by default, re-enable with otel.instrumentation.common.experimental.controller-telemetry.enabled=true (#15604)

🚫 Deprecations

  • Library instrumentation: deprecate setSpanNameExtractor() and setStatusExtractor() in favor of setSpanNameExtractorCustomizer() and setStatusExtractorCustomizer() (#15529)

🌟 New javaagent instrumentation

🌟 New library instrumentation

📈 Enhancements

  • Spring starter: add declarative config logging exporter (#14917)
  • Failsafe: add support for RetryPolicy (#15255, #15537)
  • GraphQL: add option to disable capturing query documents (#15384)
  • JMX metrics: allow any classpath resource path in rules (#15413)
  • Spring Boot actuator autoconfigure: support Spring Boot 4 (#15433)
  • Spring JMS: support Spring Boot 4 (#15434)
  • Spring starter: support Spring Boot 4 (#15459)

... (truncated)

Commits

Updates com.microsoft.azure:applicationinsights-agent from 3.7.5 to 3.7.6

Release notes

Sourced from com.microsoft.azure:applicationinsights-agent's releases.

Application Insights Java 3.7.6 (GA)

Enhancements

Changelog

Sourced from com.microsoft.azure:applicationinsights-agent's changelog.

Version 3.7.6 GA (10/28/2025)

Enhancements

Commits
  • b344e5d Prepare to release 3.7.6 (#4524)
  • 55de586 Bump errorProneVersion from 2.42.0 to 2.43.0 (#4518)
  • 2fbf542 Bump org.springframework.boot:spring-boot-starter-web from 3.5.6 to 3.5.7 in ...
  • 209da6f Bump actions/upload-artifact from 4 to 5 (#4523)
  • 448fef0 Update gradle toolchain to Java 21 (#4519)
  • 2f5dfcf Bump org.springframework.boot from 3.5.6 to 3.5.7 in /perf-tests (#4521)
  • f00d1fc Fix Release Tag (#4517)
  • 1e93aa5 Bump com.github.oshi:oshi-core from 6.9.0 to 6.9.1 (#4513)
  • 5b07750 Configure Dependabot to group testcontainers dependency updates (#4510)
  • 0a9543e Add instructions for bisecting upstream regressions (#4509)
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-maven-plugin from 3.5.6 to 4.0.1

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v4.0.1

⚠️ Noteworthy changes

  • Hibernate has been upgraded to 7.2.0.Final in response to Hibernate 7.1 moving to limited support
  • spring-boot-starter-kotlin-serialization has been renamed to to spring-boot-starter-kotlinx-serialization-json and spring-boot-starter-kotlin-serialization-test has been renamed to spring-boot-starter-kotlinx-serialization-json-test. This change aligns the starters' names with those of their respective modules
  • Using TestRestTemplate now requires a dependency on spring-boot-restclient

🐞 Bug Fixes

  • JsonMixinModuleEntriesBeanRegistrationAotProcessor does not handle deprecated code #48564
  • JdbcSessionAutoConfiguration may not match when using the auto-configured DataSource #48552
  • @ServiceConnection for LgtmStackContainer fails when logging endpoint is configured due to multiple OtlpLoggingConnectionDetails beans #48536
  • WebApplicationType does not consider modules when deduced from classpath #48517
  • Spring Session auto-configuration fails in a war deployment as ServerProperties is not available #48493
  • Opentelemetry logging export requires actuator module #48488
  • RabbitHealthIndicator reports an error when version is missing from the connection's server properties #48487
  • Actuator Info class has inconsistent nullability annotations and cannot be built with null value #48480
  • Profiles retained during AOT processing are not configured in a native image #48476
  • Security matchers and WebServerNamespace resolution can fail with NoClassDefFoundError when used in a traditional WAR deployment #48388
  • HealthEndpointGroupMembershipValidator does not consider reactive health indicators causing NoSuchHealthContributorException to be thrown #48387
  • spring.jackson.default-property-inclusion is not applied to content inclusion #48343
  • TestRestTemplate.getRootUri() returns empty string #48330
  • Redis health check reports an error when redis_version is missing from the INFO response #48328
  • Parent's MeterRegistry beans are closed when child context closes #48325
  • HttpMessageConverters picks up converter beans for both client and server #48310
  • Conditions to auto-configure a RestClient are outdated with the modularization #48308
  • A custom JwtTypeValidator that replaces the default can no longer be configured #48301
  • PropertiesRestClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #48296
  • SpringBootTest.UseMainMethod.WHEN_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method #48275
  • Conditions to auto-configure RestClient-based HTTP service clients are outdated with the modularization #48274
  • Starter for Kotlinx Serialization Json is misnamed #48262
  • ApplicationServletEnvironment is no longer configured in war deployments #48254
  • RestClient.Builder bean present in @SpringBootTest due to spring-boot-starter-webmvc-test, but missing at runtime without restclient starter #48253
  • ProblemDetail is rendered to XML incorrectly #48222

📔 Documentation

  • Harmonize Kotlin example for HTTP Service client support #48577
  • Document HttpMessageConverters detection changes in 4.0.1 #48574
  • Improve javadoc for when to use class names rather than class references #48569
  • Documentation has an outdated reference to the Jackson Kotlin Module #48534
  • Caching documentation should clarify how to use a no-op implementation to run a test suite #48532
  • Document that the default rolling policy for Log4j2 requires logging.file.path to be set #48527
  • Review documentation and migration guide about changes in @AutoConfigureCache #48522
  • License header in build samples is displayed in the reference documentation #48478
  • Configuring Two DataSources How-To code sample is inconsistent #48449
  • Fix links to source files on GitHub #48398
  • Documentation contains broken links to GitHub source files #48394
  • Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #48360
  • Correct the annotation in the Kotlin @ConfigurationPropertiesSource example #48357
  • Polish TestRestTemplate examples in the reference guide #48336

... (truncated)

Commits
  • b2bc463 Release v4.0.1
  • 252b218 Correct renaming of Kotlinx Serialization JSON starters
  • 2fa73c2 Merge pull request #48577 from jwalter
  • 3e68988 Polish "Harmonize Kotlin example for HTTP Service client support"
  • 423373b Harmonize Kotlin example for HTTP Service client support
  • f61ac29 Document HttpMessageConverters detection changes
  • 2519a5d Merge branch '3.5.x'
  • 4fc3ca3 Next development version (v3.5.10-SNAPSHOT)
  • aaf66f4 Merge branch '3.5.x'
  • 08e2cab Polish javadoc for when to use class names rather than class references
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-api from 1.55.0 to 1.57.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.57.0

API

  • Add GlobalOpenTelemetry#getOrNoop, #isSet. Update #get to always returns obfuscated instance (#7819)

Incubating

  • Logs: Complex attributes incubating implementation (#7814)

SDK

Logs

  • Add minimum severity and trace-based logger configuration (incubating API) (#7529)

Exporters

  • OTLP: VarHandle string encoder (#7701)
  • OTLP: Fix OkHttpGrpcSender to properly await executor shutdown (#7840)
  • OTLP: avoid auto-config warning (#7881)
  • OTLP: update error message for missing GrpcSenderProvider dependency (#7884)

Extensions

  • Declarative config: add runtime hints for graal VM (#7866)
  • Declarative config: add missing warning about discarded value (#7821)

Project tooling

  • Update macos version to latest and switch to corretto for testing (#7841)
  • Sync Java worflows: Allow re-running prepare release branch workflow (#7845)
  • Simplify and standardize renovate custom managers across Java repos (#7846)
  • Remove misspell workflow (#7852)
  • Fix link checks on main (#7867)
  • Add zeitlinger as approver (#7868)
  • Move snapshot publishing to daily build (#7886)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​breedx-splk @​HarshMehta112 @​jack-berg @​jaydeluca @​jeanbisutti @​jkwatson @​kevinburkesegment @​laurit @​michaldo

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.57.0 (2025-12-05)

API

  • Add GlobalOpenTelemetry#getOrNoop, #isSet. Update #get to always returns obfuscated instance (#7819)

Incubating

  • Logs: Complex attributes incubating implementation (#7814)

SDK

Logs

  • Add minimum severity and trace-based logger configuration (incubating API) (#7529)

Exporters

  • OTLP: VarHandle string encoder (#7701)
  • OTLP: Fix OkHttpGrpcSender to properly await executor shutdown (#7840)
  • OTLP: avoid auto-config warning (#7881)
  • OTLP: update error message for missing GrpcSenderProvider dependency (#7884)

Extensions

  • Declarative config: add runtime hints for graal VM (#7866)
  • Declarative config: add missing warning about discarded value (#7821)

Project tooling

  • Update macos version to latest and switch to corretto for testing (#7841)
  • Sync Java worflows: Allow re-running prepare release branch workflow (#7845)
  • Simplify and standardize renovate custom managers across Java repos (#7846)
  • Remove misspell workflow (#7852)
  • Fix link checks on main (#7867)
  • Add zeitlinger as approver

... (truncated)

Commits
  • 2c5a4f8 [release/v1.57.x] Prepare release 1.57.0 (#7899)
  • ada4e21 Prepare for 1.57.0 release (#7894)
  • 01a02a8 Enable gradle config cache (#7893)
  • 67a886e fix(deps): update dependency com.uber.nullaway:nullaway to v0.12.14 (#7892)
  • ef17aa5 fix(deps): update armeriaversion to v1.34.1 (#7891)
  • 67df5bc Disable errorprone RequestExplicitNullMarking (#7890)
  • 60698f7 chore(deps): update otel/opentelemetry-collector-contrib:0.141.0 docker diges...
  • 76c622c Move snapshot publishing to daily build (#7886)
  • cb83d7c chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.141...
  • 5772c1d fix(deps): update dependency com.uber.nullaway:nullaway to v0.12.13 (#7885)
  • Additional commits viewable in compare view

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations from 2.21.0 to 2.23.0

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations's releases.

Version 2.23.0

This release targets the OpenTelemetry SDK 1.57.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

⚠️ Breaking Changes

  • ActiveMQ Classic JMX metrics: rename attributes and metrics to align with semantic conventions (see PR description for specifics) (#14996)
  • Library instrumentation: remove previously deprecated methods from telemetry builders (#15324)
  • Logback: captureArguments no longer captures message template, use captureTemplate (#15423)
  • Play: disable controller spans by default, re-enable with otel.instrumentation.common.experimental.controller-telemetry.enabled=true (#15604)

🚫 Deprecations

  • Library instrumentation: deprecate setSpanNameExtractor() and setStatusExtractor() in favor of setSpanNameExtractorCustomizer() and setStatusExtractorCustomizer() (#15529)

🌟 New javaagent instrumentation

🌟 New library instrumentation

📈 Enhancements

  • Spring starter: add declarative config logging exporter (#14917)
  • Failsafe: add support for RetryPolicy (#15255, #15537)
  • GraphQL: add option to disable capturing query documents (#15384)
  • JMX metrics: allow any classpath resource path in rules (#15413)
  • Spring Boot actuator autoconfigure: support Spring Boot 4 (#15433)
  • Spring JMS: support Spring Boot 4 (#15434)
  • Spring starter: support Spring Boot 4 (#15459)
  • Lettuce: support custom ClientResources (#15470)
  • Lettuce: add reactor-core compatibility checker (#15472)
  • Servlet: propagate context explicitly for async runnables (#15476)
  • Servlet: always add trace_id and span_id attributes to requests (#15485)
  • Pekko HTTP: separate route instrumentation from HTTP server instrumentation (#15499)
  • MongoDB: emit versioned scope name (#15500)
  • Spring WebFlux: support Spring Boot 4 (#15502, #15574)
  • Spring WebMVC: support Spring Boot 4 (#15525)
  • Spring Cloud Gateway: support Spring Boot 4 (#15540)
  • Spring starter: add missing Kafka configuration options (#15592)
  • OpenTelemetry API interop: support new GlobalOpenTelemetry methods introduced in 1.57 (#15620)

🛠️ Bug fixes

  • Spring Web/WebFlux: restore GraalVM native-image compatibility (#15306)
  • Spring Kafka: end span in afterRecord callback (#15367)

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations's changelog.

Version 2.23.0 (2025-12-13)

⚠️ Breaking Changes

  • ActiveMQ Classic JMX metrics: rename attributes and metrics to align with semantic conventions (see PR description for specifics) (#14996)
  • Library instrumentation: remove previously deprecated methods from telemetry builders (#15324)
  • Logback: captureArguments no longer captures message template, use captureTemplate (#15423)
  • Play: disable controller spans by default, re-enable with otel.instrumentation.common.experimental.controller-telemetry.enabled=true (#15604)

🚫 Deprecations

  • Library instrumentation: deprecate setSpanNameExtractor() and setStatusExtractor() in favor of setSpanNameExtractorCustomizer() and setStatusExtractorCustomizer() (#15529)

🌟 New javaagent instrumentation

🌟 New library instrumentation

📈 Enhancements

  • Spring starter: add declarative config logging exporter (#14917)
  • Failsafe: add support for RetryPolicy (#15255, #15537)
  • GraphQL: add option to disable capturing query documents (#15384)
  • JMX metrics: allow any classpath resource path in rules (#15413)
  • Spring Boot actuator autoconfigure: support Spring Boot 4 (#15433)
  • Spring JMS: support Spring Boot 4 (#15434)
  • Spring starter: support Spring Boot 4 (#15459)

... (truncated)

Commits
  • 351b697 [release/v2....

    Description has been truncated

@dependabot
Bump the all-dependencies group across 1 directory with 25 updates
c1dad9d 
Bumps the all-dependencies group with 25 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.21.0-alpha` | `2.23.0-alpha` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.21.0` | `2.23.0` |
| [com.microsoft.azure:applicationinsights-agent](https://github.com/Microsoft/ApplicationInsights-Java) | `3.7.5` | `3.7.6` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.0.1` |
| [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.55.0` | `1.57.0` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.21.0` | `2.23.0` |
| [com.microsoft.azure:applicationinsights-web](https://github.com/Microsoft/ApplicationInsights-Java) | `3.7.5` | `3.7.6` |
| [io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.21.0-alpha` | `2.23.0-alpha` |
| org.apache.logging.log4j:log4j-api | `2.25.2` | `2.25.3` |
| org.apache.logging.log4j:log4j-core | `2.25.2` | `2.25.3` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.20` | `1.5.23` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.20` | `1.5.23` |
| [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `6.0.0` | `6.0.1` |
| [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework) | `6.0.0` | `6.0.1` |
| org.apache.logging.log4j:log4j-slf4j2-impl | `2.25.2` | `2.25.3` |
| org.apache.logging.log4j:log4j-slf4j-impl | `2.25.2` | `2.25.3` |
| [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) | `1.15.5` | `1.16.1` |
| [io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi](https://github.com/open-telemetry/opentelemetry-java) | `1.55.0` | `1.57.0` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-api](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.21.0` | `2.23.0` |
| [io.opentelemetry.javaagent:opentelemetry-javaagent-extension-api](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.21.0-alpha` | `2.23.0-alpha` |
| [org.apache.maven.plugins:maven-resources-plugin](https://github.com/apache/maven-resources-plugin) | `3.3.1` | `3.4.0` |
| [io.opentelemetry:opentelemetry-sdk-common](https://github.com/open-telemetry/opentelemetry-java) | `1.55.0` | `1.57.0` |
| [io.opentelemetry:opentelemetry-sdk-trace](https://github.com/open-telemetry/opentelemetry-java) | `1.55.0` | `1.57.0` |
| [org.springframework.boot:spring-boot-autoconfigure](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.0.1` |
| [com.microsoft.azure:applicationinsights-runtime-attach](https://github.com/Microsoft/ApplicationInsights-Java) | `3.7.5` | `3.7.6` |



Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha` from 2.21.0-alpha to 2.23.0-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom` from 2.21.0 to 2.23.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java-instrumentation@v2.21.0...v2.23.0)

Updates `com.microsoft.azure:applicationinsights-agent` from 3.7.5 to 3.7.6
- [Release notes](https://github.com/Microsoft/ApplicationInsights-Java/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-Java/blob/main/CHANGELOG.md)
- [Commits](microsoft/ApplicationInsights-Java@3.7.5...3.7.6)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.6 to 4.0.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.0.1)

Updates `io.opentelemetry:opentelemetry-api` from 1.55.0 to 1.57.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.55.0...v1.57.0)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations` from 2.21.0 to 2.23.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java-instrumentation@v2.21.0...v2.23.0)

Updates `com.microsoft.azure:applicationinsights-web` from 3.7.5 to 3.7.6
- [Release notes](https://github.com/Microsoft/ApplicationInsights-Java/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-Java/blob/main/CHANGELOG.md)
- [Commits](microsoft/ApplicationInsights-Java@3.7.5...3.7.6)

Updates `io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17` from 2.21.0-alpha to 2.23.0-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits)

Updates `org.apache.logging.log4j:log4j-api` from 2.25.2 to 2.25.3

Updates `org.apache.logging.log4j:log4j-core` from 2.25.2 to 2.25.3

Updates `ch.qos.logback:logback-core` from 1.5.20 to 1.5.23
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.20...v_1.5.23)

Updates `ch.qos.logback:logback-classic` from 1.5.20 to 1.5.23
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.20...v_1.5.23)

Updates `org.junit.jupiter:junit-jupiter-api` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.0...r6.0.1)

Updates `org.junit.jupiter:junit-jupiter-engine` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.0...r6.0.1)

Updates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.25.2 to 2.25.3

Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.2 to 2.25.3

Updates `io.micrometer:micrometer-core` from 1.15.5 to 1.16.1
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.15.5...v1.16.1)

Updates `io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi` from 1.55.0 to 1.57.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.55.0...v1.57.0)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-api` from 2.21.0 to 2.23.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java-instrumentation@v2.21.0...v2.23.0)

Updates `io.opentelemetry.javaagent:opentelemetry-javaagent-extension-api` from 2.21.0-alpha to 2.23.0-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits)

Updates `org.apache.maven.plugins:maven-resources-plugin` from 3.3.1 to 3.4.0
- [Release notes](https://github.com/apache/maven-resources-plugin/releases)
- [Commits](apache/maven-resources-plugin@maven-resources-plugin-3.3.1...v3.4.0)

Updates `io.opentelemetry:opentelemetry-sdk-common` from 1.55.0 to 1.57.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.55.0...v1.57.0)

Updates `io.opentelemetry:opentelemetry-sdk-trace` from 1.55.0 to 1.57.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.55.0...v1.57.0)

Updates `org.springframework.boot:spring-boot-autoconfigure` from 3.5.6 to 4.0.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.0.1)

Updates `com.microsoft.azure:applicationinsights-runtime-attach` from 3.7.5 to 3.7.6
- [Release notes](https://github.com/Microsoft/ApplicationInsights-Java/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-Java/blob/main/CHANGELOG.md)
- [Commits](microsoft/ApplicationInsights-Java@3.7.5...3.7.6)

---
updated-dependencies:
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha
  dependency-version: 2.23.0-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.microsoft.azure:applicationinsights-agent
  dependency-version: 3.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.microsoft.azure:applicationinsights-web
  dependency-version: 3.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17
  dependency-version: 2.23.0-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-version: 2.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-api
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl
  dependency-version: 2.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
  dependency-version: 2.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: io.micrometer:micrometer-core
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi
  dependency-version: 1.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-api
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.javaagent:opentelemetry-javaagent-extension-api
  dependency-version: 2.23.0-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.apache.maven.plugins:maven-resources-plugin
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk-common
  dependency-version: 1.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk-trace
  dependency-version: 1.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.springframework.boot:spring-boot-autoconfigure
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: com.microsoft.azure:applicationinsights-runtime-attach
  dependency-version: 3.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 22, 2025
@dependabot dependabot bot requested a review from harsimar as a code owner December 22, 2025 14:05
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 22, 2025
@dependabot dependabot bot added the java Pull requests that update Java code label Dec 22, 2025
@trask trask merged commit 1fa1cf1 into main Jan 5, 2026
2 checks passed
@trask trask deleted the dependabot/maven/all-dependencies-45e382aeb2 branch January 5, 2026 17:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@trask trask trask approved these changes

@harsimar harsimar Awaiting requested review from harsimar harsimar is a code owner

@heyams heyams Awaiting requested review from heyams heyams is a code owner

@jeanbisutti jeanbisutti Awaiting requested review from jeanbisutti jeanbisutti is a code owner

@ramthi ramthi Awaiting requested review from ramthi ramthi is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@trask