chore(deps): update upper bound dependencies file#4146
Conversation
Summary of ChangesHello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request systematically updates several key Java dependencies, encompassing both minor version bumps and patch releases. The updates introduce new features, performance enhancements, and critical bug fixes across various components, including Google API client libraries, error-prone annotations, Protocol Buffers, CEL expression language, OpenTelemetry, and Jackson. This ensures the project benefits from the latest improvements and maintains compatibility with evolving ecosystems. Highlights
Changelog
Activity
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates several dependency versions in dependencies.txt. While most updates are minor or patch versions, it's important to note that dev.cel:cel (v0.12.0) and io.opentelemetry:opentelemetry-bom (v1.60.0) introduce breaking changes. These changes should be thoroughly reviewed to ensure compatibility with the existing codebase and to adhere to the repository's dependency management guidelines, which advise against bumping versions without a strong justification like a CVE or critical bug fix.
| com.google.flogger:flogger,flogger=0.9 | ||
| org.apache.arrow:arrow-memory-core,arrow=18.3.0 | ||
| dev.cel:cel,dev.cel=0.11.1 | ||
| dev.cel:cel,dev.cel=0.12.0 |
There was a problem hiding this comment.
The update to dev.cel:cel from 0.11.1 to 0.12.0 includes explicit "Breaking Changes" as detailed in its release notes. According to the repository's dependency management guidelines, external dependency versions should ideally not be bumped unless there is a known CVE or a critical bug fix (Repository Style Guide, line 137). Please confirm that these breaking changes have been thoroughly evaluated and addressed, or that they do not impact our current usage.
References
- Try not to bump any external dependency version unless there is a known CVE (security or vulnerability issue) or a critical bug fix.
| io.opentelemetry:opentelemetry-bom,opentelemetry=1.59.0 | ||
| com.google.errorprone:error_prone_annotations,errorprone=2.47.0 | ||
| com.google.protobuf:protobuf-java,protobuf=4.34.0 | ||
| io.opentelemetry:opentelemetry-bom,opentelemetry=1.60.1 |
There was a problem hiding this comment.
The update to io.opentelemetry:opentelemetry-bom from 1.59.0 to 1.60.1 includes a "BREAKING bug fix" in version 1.60.0 related to case sensitivity in GlobUtil and IncludePatternMatching. This could potentially alter behavior in parts of the codebase that rely on the previous case-insensitivity. Please confirm that the impact of this breaking change has been assessed and mitigated if necessary, aligning with the repository's dependency management principles (Repository Style Guide, line 137).
References
- Try not to bump any external dependency version unless there is a known CVE (security or vulnerability issue) or a critical bug fix.
|
|
2 participants
This PR contains the following updates:
2.21.0->2.21.12.8.1->2.9.02.47.0->2.48.04.33.5->4.34.00.11.1->0.12.01.39.0->1.40.01.59.0->1.60.15.4.1->5.4.2Release Notes
googleapis/google-api-java-client (com.google.api-client:google-api-client)
v2.9.0Compare Source
Features
Bug Fixes
google/error-prone (com.google.errorprone:error_prone_annotations)
v2.48.0: Error Prone 2.48.0Compare Source
Changes:
@-files) (google/error-prone@8e84edf)New checks:
AvoidValueSetterUnnecessarySemicolonClosed issues: #5529, #5537, #5522, #5521
Full changelog: google/error-prone@v2.47.0...v2.48.0
google/cel-java (dev.cel:cel)
v0.12.0Compare Source
Features
has()macros), and supports recursive inlining based on variable dependency ordering.json_namefield options. When enableJsonFieldNames option is enabled, the compiler will exclusively accept thejson_nameand no longer recognize the original protobuf field name. To maintain backwards compatibility, the runtime continues to support both the original name and thejson_namewhen resolving fields.Breaking Changes
evaluateCanonicalTypesToNativeValuesby default. See previous release for details.StringConversion,StringConcatenation, andListConcatenationfromCelOptionsin favor of standard library subsetting viaCelStandardDeclarationsandCelStandardFunctions.Bug fixes
AsyncProgramImplto preserve resolved attributes in #913.What's Changed
Environment & Policy Compiler
Optimizations & Internals
list.distinct()in #902Miscellaneous
New Contributors
Full Changelog: google/cel-java@v0.11.1...v0.12.0
open-telemetry/semantic-conventions-java (io.opentelemetry.semconv:opentelemetry-semconv)
v1.40.0Compare Source
(#418)
open-telemetry/opentelemetry-java (io.opentelemetry:opentelemetry-bom)
v1.60.1Compare Source
SDK
Extensions
(#8157)
v1.60.0Compare Source
API
(#8012)
SpanBuilder.setAttributeallows null values(#8072)
Incubating
(#8074)
ExtendedAttributes,ExtendedAttributeKey,ExtendedAttributeType,ExtendedAttributesBuilder(#8060)
peerServiceMappingaccessor fromInstrumentationConfigUtil(#8088)
SDK
Traces
TraceIdRatioBasedSampleras root sampler(#8065)
(#7993)
(#8096)
(#8145)
Metrics
(#8015)
PeriodicMetricReader(#8038)
(#8095)
otel.experimental.metrics.cardinality.limitproperty(#8124)
GlobUtilandIncludePatternMatching, used in views and declarativeconfig matching, previously were inconsistent in case sensitivity. If a glob char (* or ?) was
present, it was evaluated with case sensitivity. If no glob chars were present, it was evaluated
with case insensitivity. Now, all are consistently evaluated with case sensitivity.
(#8152)
Logs
LogRecordBuilder.setException(#8089)
setTimestampjavadoc for event timestamp behavior(#8104)
Exporters
(#8014)
(#8080)
(#8107)
KeyManagerFactory.getDefaultAlgorithm()inTlsUtil.keyManager()(#8122)
(#8147)
Extensions
(#8059)
(#8123)
(#8028)
(#8069)
DeclarativeConfigContext(#8070)
(#8073)
(#8081)
(#8045)
(#8133)
(#8037)
(#8046)
(#8075)
(#8090)
Project tooling
(#6978)
(#8061)
(#8078)
(#8083)
(#8031)
LogRecordBenchmark(#8106,
#8117)
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.