Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[PF-2983]: Bump the minor-patch-dependencies group with 10 updates #204

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2024

Bumps the minor-patch-dependencies group with 10 updates:

Package From To
org.bouncycastle:bcprov-jdk18on 1.78.1 1.79
com.google.cloud:libraries-bom 26.47.0 26.50.0
bio.terra:stairway-gcp 1.1.13-SNAPSHOT 1.1.14-SNAPSHOT
bio.terra:stairway-azure 1.1.13-SNAPSHOT 1.1.14-SNAPSHOT
io.opentelemetry:opentelemetry-bom-alpha 1.42.1-alpha 1.43.0-alpha
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom 2.8.0 2.9.0
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha 2.8.0-alpha 2.9.0-alpha
com.google.cloud.opentelemetry:exporter-trace 0.32.0 0.33.0
com.google.cloud.opentelemetry:exporter-metrics 0.32.0 0.33.0
org.springframework.boot 3.3.4 3.3.5

Updates org.bouncycastle:bcprov-jdk18on from 1.78.1 to 1.79

Changelog

Sourced from org.bouncycastle:bcprov-jdk18on's changelog.

2.1.1 Version Release: 1.79 Date:      2024, 30th October.

... (truncated)

Commits

Updates com.google.cloud:libraries-bom from 26.47.0 to 26.50.0

Release notes

Sourced from com.google.cloud:libraries-bom's releases.

v26.50.0

GCP Libraries BOM 26.50.0

Here are the differences from the previous version (26.49.0)

The group ID of the following artifacts is com.google.cloud.

Notable Changes

Protobuf-Java v4.28.3

This version of Libraries-Bom is upgrading the Protobuf Java (PBJ) Runtime version to v4.28.3. The Java SDK aims to use the latest Protobuf version to utilize the latest stable features and to mitigate vulnerabilities (CVEs).

Potential PBJ Runtime 4.28.3 Upgrade Issues

There are a few potential compatibility issues that may arise for users following the PBJ Runtime upgrade to v4.28.3. Details about these potential issues are outlined below.

Note: The following issues may not be exhaustive and users may encounter additional issues.

Source Compatibility Issues

PBJ 4.26.x removed some methods from runtime. Users may see source compilation issues when compiling their application. If you do not use any of the following removed methods, you should not see these issues.

... (truncated)

Commits
  • 23ace8b chore: release main (#6817)
  • 88b0c80 deps: update dependency com.google.cloud:google-cloud-pubsublite-bom to v1.14...
  • 5662b26 chore: Override the version of protobuf-bom to 4.28.3 in libraries-bom. (#6836)
  • 2c49bcf deps: update dependency com.google.cloud:google-cloud-nio to v0.127.26 (#6835)
  • 9cc59ba deps: update dependency com.google.cloud:google-cloud-bigtable-bom to v2.46.0...
  • 2d2b829 deps: update dependency com.google.cloud:google-cloud-firestore-bom to v3.28....
  • 39c5c2f deps: update dependency com.google.cloud:google-cloud-bigquerystorage-bom to ...
  • 476cc06 deps: update dependency com.google.cloud:google-cloud-logging-logback to v0.1...
  • d02b9b5 deps: update dependency com.google.cloud:google-cloud-pubsub-bom to v1.134.1 ...
  • 0401269 deps: update dependency com.google.cloud:google-cloud-spanner-bom to v6.80.1 ...
  • Additional commits viewable in compare view

Updates bio.terra:stairway-gcp from 1.1.13-SNAPSHOT to 1.1.14-SNAPSHOT

Updates bio.terra:stairway-azure from 1.1.13-SNAPSHOT to 1.1.14-SNAPSHOT

Updates bio.terra:stairway-azure from 1.1.13-SNAPSHOT to 1.1.14-SNAPSHOT

Updates io.opentelemetry:opentelemetry-bom-alpha from 1.42.1-alpha to 1.43.0-alpha

Release notes

Sourced from io.opentelemetry:opentelemetry-bom-alpha's releases.

Version 1.42.1

This is a patch release on the previous 1.42.0 release, fixing the issue(s) below.

API

  • Revert java-test-fixtures plugin to remove test dependencies from pom.xml. (#6695)
Changelog

Sourced from io.opentelemetry:opentelemetry-bom-alpha's changelog.

Changelog

Unreleased

Version 1.43.0 (2024-10-11)

API

  • Add helper class to capture context using ScheduledExecutorService (#6712)
  • Adds Baggage.getEntry(String key) (#6765)

Extensions

  • Fix ottracepropagation for short span ids (#6734)

SDK

Metrics

  • Optimize advice with FilteredAttributes (#6633)

Exporters

  • Add experimental stdout log, metric, trace exporters for printing records to stdout in standard OTLP JSON format. (#6675, #6750)
  • Add Marshalers for profiling signal type (#6680)

Extensions

  • Add *Model suffix to declarative config generated classes. (#6721)
  • Use autoconfigured ClassLoader to load declarative config (#6725)
  • Update declarative config to use opentelemetry-configuration v0.3.0 (#6733)
  • Add StructuredConfigProperties#getStructured default method, add StructuredConfigProperties.empty() (#6759)

Testing

  • Add context info about wrong span or trace. (#6703)

... (truncated)

Commits

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom from 2.8.0 to 2.9.0

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom's releases.

Version 2.9.0

This release targets the OpenTelemetry SDK 1.43.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

📈 Enhancements

  • Allow JMX Insight reuse for remote connections (#12178)
  • Add opentelemetry-semconv-incubating to bom-alpha (#12266)
  • Bridge more incubating api (#12230)
  • Jetty HttpClient 12: propagate context to all response listeners (#12326)
  • Add Pekko Scheduler context propagation (#12359)
  • Add Akka Scheduler context propagation (#12373)
  • Add instrumentation for spring-cloud-aws SqsListener annotation (#12314)
  • Align SpringConfigProperties with DefaultConfigProperties (#12398)
  • Clear context propagation virtual field (#12397)
  • The opt-in experimental attribute aws.requestId was renamed to aws.request_id (to match the semantic conventions) and it is now emitted by default. (#12352)
  • Ability to set Logback argument capture with a property in Spring Boot Starter (#12442)
  • Support experimental declarative configuration (#12265)
  • Spring Boot Starter: Add auto configuration for spring scheduling instrumentation (#12438)
  • Extract APIGatewayProxyRequestEvent headers for context propagation in AWS Lambda instrumentation (#12440)
  • Support JMX state metrics (#12369)
  • Allow method instrumentation module to trace methods in boot loader (#12454)

🛠️ Bug fixes

  • Fix gc duration metric in runtime-telemetry-java17 (#12256)
  • Fix vert.x route containing duplicate segments when RoutingContext.next is used (#12260)
  • Fixes for latest mongo version (#12331)
  • Fix context propagation for ratpack request body stream (#12330)
  • Fix lambda instrumentation to forceFlush logs also (#12341)
  • Can't add custom AttributeExtractor to Apache HttpClient 5 library instrumentation (#12394)
  • Disable logback capture arguments by default (#12445)
  • Add support for missing list properties in spring starter (#12434)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​aarrsseni @​AntonioLyubchev @​breedx-splk @​brunobat @​cleverchuk @​Dimagreg @​dubek @​egahlin @​encodedrose @​fabiolnh @​heyams

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom's changelog.

Version 2.9.0 (2024-10-17)

📈 Enhancements

  • Allow JMX Insight reuse for remote connections (#12178)
  • Add opentelemetry-semconv-incubating to bom-alpha (#12266)
  • Bridge more incubating api (#12230)
  • Jetty HttpClient 12: propagate context to all response listeners (#12326)
  • Add Pekko Scheduler context propagation (#12359)
  • Add Akka Scheduler context propagation (#12373)
  • Add instrumentation for spring-cloud-aws SqsListener annotation (#12314)
  • Align SpringConfigProperties with DefaultConfigProperties (#12398)
  • Clear context propagation virtual field (#12397)
  • The opt-in experimental attribute aws.requestId was renamed to aws.request_id (to match the semantic conventions) and it is now emitted by default. (#12352)
  • Ability to set Logback argument capture with a property in Spring Boot Starter (#12442)
  • Support experimental declarative configuration (#12265)
  • Spring Boot Starter: Add auto configuration for spring scheduling instrumentation (#12438)
  • Extract APIGatewayProxyRequestEvent headers for context propagation in AWS Lambda instrumentation (#12440)
  • Support JMX state metrics (#12369)
  • Allow method instrumentation module to trace methods in boot loader (#12454)

🛠️ Bug fixes

  • Fix gc duration metric in runtime-telemetry-java17 (#12256)
  • Fix vert.x route containing duplicate segments when RoutingContext.next is used (#12260)
  • Fixes for latest mongo version (#12331)
  • Fix context propagation for ratpack request body stream (#12330)
  • Fix lambda instrumentation to forceFlush logs also (#12341)

... (truncated)

Commits

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha from 2.8.0-alpha to 2.9.0-alpha

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's releases.

Version 2.8.0

This release targets the OpenTelemetry SDK 1.42.1.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

Migration notes

  • The unit on the opt-in Java 17 JFR-based metrics was updated from milliseconds to seconds to conform with the semantic conventions. If you are using the Java agent, this only affects you if you are opting in via otel.instrumentation.runtime-telemetry-java17.enable-all=true. (#12084, #12244)

📈 Enhancements

  • Update Pulsar instrumentation to work with next Pulsar release (#11648)
  • Capture network.peer.address in OkHttp 3.0 instrumentation (#12012)
  • Add support for CXF 4.0 JAX-WS (#12077)
  • Add rules for capturing Apache Camel metrics exposed by JMX MBeans (#11901)
  • Make RocketMQ span status extractor delegate to the default extractor (#12183)
  • Bridge log body any value (#12204)
  • Add declarative config support for resource providers (#12144)

🛠️ Bug fixes

  • Fix Javaagent doesn't work with java.net.spi.InetAddressResolverProvider (#11987)
  • Fix Oracle UCP 11 metrics not emitted (#12052)
  • Fix wrong database info captured while using Apache ShardingSphere (#12066)
  • Fix RabbitMQ NullPointerException (#12109)
  • Fix possible NullPointerException in Play instrumentation (#12121)
  • Fix error span status for successful requests in Ktor (#12161)
  • Make OpenTelemetryHandlerMappingFilter handle exceptions from ServletRequestPathUtils.parseAndCache() (#12221)
  • Fix tracing CoroutineCrudRepository.findById (#12131)
  • Fix capturing context in log4j library instrumentation with async logger (#12176)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​123liuziming @​allati @​crossoverJie @​dao-jun @​hermannpencole @​heyams @​huange7 @​jack-berg @​jackshirazi @​jaydeluca @​jeanbisutti @​jerrylincs @​JonasKunz @​laurit @​LikeTheSalad

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's changelog.

Changelog

Unreleased

  • Update azure-core-tracing-opentelemetry version and improve HTTP suppression to back off when Azure SDK tracing was disabled. (#12489)

Version 2.9.0 (2024-10-17)

📈 Enhancements

  • Allow JMX Insight reuse for remote connections (#12178)
  • Add opentelemetry-semconv-incubating to bom-alpha (#12266)
  • Bridge more incubating api (#12230)
  • Jetty HttpClient 12: propagate context to all response listeners (#12326)
  • Add Pekko Scheduler context propagation (#12359)
  • Add Akka Scheduler context propagation (#12373)
  • Add instrumentation for spring-cloud-aws SqsListener annotation (#12314)
  • Align SpringConfigProperties with DefaultConfigProperties (#12398)
  • Clear context propagation virtual field (#12397)
  • The opt-in experimental attribute aws.requestId was renamed to aws.request_id (to match the semantic conventions) and it is now emitted by default. (#12352)
  • Ability to set Logback argument capture with a property in Spring Boot Starter (#12442)
  • Support experimental declarative configuration (#12265)
  • Spring Boot Starter: Add auto configuration for spring scheduling instrumentation (#12438)
  • Extract APIGatewayProxyRequestEvent headers for context propagation in AWS Lambda instrumentation (#12440)
  • Support JMX state metrics (#12369)
  • Allow method instrumentation module to trace methods in boot loader (#12454)

🛠️ Bug fixes

  • Fix gc duration metric in runtime-telemetry-java17 (#12256)

... (truncated)

Commits

Updates com.google.cloud.opentelemetry:exporter-trace from 0.32.0 to 0.33.0

Release notes

Sourced from com.google.cloud.opentelemetry:exporter-trace's releases.

v0.33.0

Release Highlights

  • Update the OpenTelemetry and Google library dependencies to address a reported CVE.

What's Changed

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-java@v0.32.0...v0.33.0

Commits

Updates com.google.cloud.opentelemetry:exporter-metrics from 0.32.0 to 0.33.0

Release notes

Sourced from com.google.cloud.opentelemetry:exporter-metrics's releases.

v0.33.0

Release Highlights

  • Update the OpenTelemetry and Google library dependencies to address a reported CVE.

What's Changed

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-java@v0.32.0...v0.33.0

Commits

Updates org.springframework.boot from 3.3.4 to 3.3.5

Release notes

Sourced from org.springframework.boot's releases.

v3.3.5

🐞 Bug Fixes

  • Running mvn spring-boot:run with classpaths that exceeds Windows' length limits leaves temporary files #42841
  • Report produced by ConditionReportApplicationContextFailureProcessor is always empty in a failed test #42785
  • Case-insensitive comparisons may be adversely affected by the user's locale #42735
  • DataSourceProperties#driverClassIsLoadable should not print a stacktrace to the error stream when it fails #42683
  • Some @ControllerEndpoint and @RestControllerEndpoint infrastructure remains undeprecated #42498
  • Auto-configuration for Rabbit Streams doesn't consider RabbitConnectionDetails #42490
  • ClassNotFoundException is thrown when loading protocol resolvers from ForkJoinPool task #42468
  • ActiveMQ Artemis Connection Factory creation fails in native image #42421
  • Duplicate meter binding when context contains multiple registries, none are primary, and one or more is a composite #42397

📔 Documentation

  • Document that embedded Tomcat must be at least 10.1.25 #42849
  • Fix systemd example configuration #42805
  • Document that the exact behavior of the maximum HTTP request header size property is server-specific #42789
  • Clarify why @Primary is recommended when defining your own ObjectMapper that replaces JacksonAutoConfiguration's #42787
  • Polish javadoc for Binder#bindOrCreate(String, Class) #42778
  • Document that Tomcat's maxQueueCapacity need to be greater than 0 #42726
  • Remove stale link to jar-to-war getting started guide #42723
  • Fix typos and formatting errors in documentation #42718
  • Fix case used for examples in "Sanitize Sensitive Values" #42702
  • Fix Regex javadoc links #42685
  • Document how Map properties are bound from environment variables #42672
  • Improve classpath index documentation for reproducible builds #42643
  • Remove links to Spring Data GemFire #42596
  • Order alphabetically the sections in Common Application Properties #42520
  • Improve the javadoc describing when @ConditionalOn(Missing)Bean will infer the type to match #42505
  • Document how to handle MANIFEST.MF in native image with Maven #42476
  • Fix links to Micrometer reference doc #42467
  • Polish documentation #42454
  • Add Javadoc since for PrometheusScrapeEndpoint(PrometheusRegistry, Properties) #42406
  • Remove note about graceful shutdown with Tomcat requiring 9.0.33 or later as we now require 10.1.x #42382
  • Document support for Java 23 #42380
  • Improve documentation for CycloneDX integration #41506

🔨 Dependency Upgrades

  • Prohibit upgrades to Undertow 2.3.18.Final #42756
  • Upgrade to CycloneDX Maven Plugin 2.8.2 #42631
  • Upgrade to GraphQL Java 22.3 #42757
  • Upgrade to Infinispan 15.0.10.Final #42632
  • Upgrade to Jaybird 5.0.6.java11 #42752
  • Upgrade to Jersey 3.1.9 #42633
  • Upgrade to Jetty 12.0.14 #42635
  • Upgrade to Jetty Reactive HTTPClient 4.0.8 #42634
  • Upgrade to jOOQ 3.19.14 #42818
  • Upgrade to JUnit Jupiter 5.10.5 #42637

... (truncated)

Commits
  • 2316ce6 Release v3.3.5
  • 02f6eb4 Merge branch '3.2.x' into 3.3.x
  • 728deaf Next development version (v3.2.12-SNAPSHOT)
  • 9ca6667 Merge branch '3.2.x' into 3.3.x
  • 9858b4b Fix release script
  • 2bf3e5a Document that embedded Tomcat must be 10.1.25 or later
  • 13e75dc Upgrade to Spring Integration 6.3.5
  • 131bbaf Merge branch '3.2.x' into 3.3.x
  • 83a3212 Use github.ref_name when deploying snapshots
  • 2d91385 Merge branch '3.2.x' into 3.3.x
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-patch-dependencies group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.78.1` | `1.79` |
| [com.google.cloud:libraries-bom](https://github.com/googleapis/java-cloud-bom) | `26.47.0` | `26.50.0` |
| bio.terra:stairway-gcp | `1.1.13-SNAPSHOT` | `1.1.14-SNAPSHOT` |
| bio.terra:stairway-azure | `1.1.13-SNAPSHOT` | `1.1.14-SNAPSHOT` |
| [io.opentelemetry:opentelemetry-bom-alpha](https://github.com/open-telemetry/opentelemetry-java) | `1.42.1-alpha` | `1.43.0-alpha` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.8.0` | `2.9.0` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.8.0-alpha` | `2.9.0-alpha` |
| [com.google.cloud.opentelemetry:exporter-trace](https://github.com/GoogleCloudPlatform/opentelemetry-operations-java) | `0.32.0` | `0.33.0` |
| [com.google.cloud.opentelemetry:exporter-metrics](https://github.com/GoogleCloudPlatform/opentelemetry-operations-java) | `0.32.0` | `0.33.0` |
| [org.springframework.boot](https://github.com/spring-projects/spring-boot) | `3.3.4` | `3.3.5` |


Updates `org.bouncycastle:bcprov-jdk18on` from 1.78.1 to 1.79
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `com.google.cloud:libraries-bom` from 26.47.0 to 26.50.0
- [Release notes](https://github.com/googleapis/java-cloud-bom/releases)
- [Changelog](https://github.com/googleapis/java-cloud-bom/blob/main/release-please-config.json)
- [Commits](googleapis/java-cloud-bom@v26.47.0...v26.50.0)

Updates `bio.terra:stairway-gcp` from 1.1.13-SNAPSHOT to 1.1.14-SNAPSHOT

Updates `bio.terra:stairway-azure` from 1.1.13-SNAPSHOT to 1.1.14-SNAPSHOT

Updates `bio.terra:stairway-azure` from 1.1.13-SNAPSHOT to 1.1.14-SNAPSHOT

Updates `io.opentelemetry:opentelemetry-bom-alpha` from 1.42.1-alpha to 1.43.0-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java/commits)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom` from 2.8.0 to 2.9.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java-instrumentation@v2.8.0...v2.9.0)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha` from 2.8.0-alpha to 2.9.0-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits)

Updates `com.google.cloud.opentelemetry:exporter-trace` from 0.32.0 to 0.33.0
- [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-java/releases)
- [Commits](GoogleCloudPlatform/opentelemetry-operations-java@v0.32.0...v0.33.0)

Updates `com.google.cloud.opentelemetry:exporter-metrics` from 0.32.0 to 0.33.0
- [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-java/releases)
- [Commits](GoogleCloudPlatform/opentelemetry-operations-java@v0.32.0...v0.33.0)

Updates `org.springframework.boot` from 3.3.4 to 3.3.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.3.4...v3.3.5)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: com.google.cloud:libraries-bom
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: bio.terra:stairway-gcp
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: bio.terra:stairway-azure
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: bio.terra:stairway-azure
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: io.opentelemetry:opentelemetry-bom-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: com.google.cloud.opentelemetry:exporter-trace
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: com.google.cloud.opentelemetry:exporter-metrics
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: org.springframework.boot
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested review from a team, rtitle and davidangb and removed request for a team November 1, 2024 10:15
Copy link

sonarqubecloud bot commented Nov 1, 2024

Copy link
Contributor

@davidangb davidangb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am hesitant to update to Spring Boot 3.3.5 here until/unless we can verify that consuming services have also updated.

@davidangb davidangb self-assigned this Nov 4, 2024
Copy link
Contributor

@rtitle rtitle left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1 it makes sense to test spring boot upgrades downstream.

Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 14, 2024

Superseded by #206.

@dependabot dependabot bot closed this Nov 14, 2024
@dependabot dependabot bot deleted the dependabot/gradle/develop/minor-patch-dependencies-2b8f9afe02 branch November 14, 2024 17:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants