Skip to content

Bump the all-dependencies group across 1 directory with 28 updates#756

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/all-dependencies-81bd6ad178
Open

Bump the all-dependencies group across 1 directory with 28 updates#756
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/all-dependencies-81bd6ad178

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2026 •
edited
Loading

Bumps the all-dependencies group with 28 updates in the / directory:

Package From To
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha 2.23.0-alpha 2.26.1-alpha
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom 2.23.0 2.26.1
com.microsoft.azure:applicationinsights-agent 3.7.6 3.7.8
org.springframework.boot:spring-boot-maven-plugin 4.0.1 4.0.5
org.apache.maven.plugins:maven-dependency-plugin 3.9.0 3.10.0
io.opentelemetry:opentelemetry-api 1.57.0 1.60.1
io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations 2.23.0 2.26.1
com.microsoft.azure:applicationinsights-web 3.7.6 3.7.8
io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17 2.23.0-alpha 2.26.1-alpha
org.apache.logging.log4j:log4j-api 2.25.3 2.25.4
org.apache.logging.log4j:log4j-core 2.25.3 2.25.4
ch.qos.logback:logback-core 1.5.23 1.5.32
ch.qos.logback:logback-classic 1.5.23 1.5.32
org.junit.jupiter:junit-jupiter-api 6.0.1 6.0.3
org.junit.jupiter:junit-jupiter-engine 6.0.1 6.0.3
org.apache.logging.log4j:log4j-slf4j2-impl 2.25.3 2.25.4
org.apache.logging.log4j:log4j-slf4j-impl 2.25.3 2.25.4
io.micrometer:micrometer-core 1.16.1 1.16.4
io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi 1.57.0 1.60.1
io.opentelemetry.instrumentation:opentelemetry-instrumentation-api 2.23.0 2.26.1
io.opentelemetry.javaagent:opentelemetry-javaagent-extension-api 2.23.0-alpha 2.26.1-alpha
org.apache.maven.plugins:maven-resources-plugin 3.4.0 3.5.0
io.opentelemetry:opentelemetry-sdk-common 1.57.0 1.60.1
io.opentelemetry:opentelemetry-sdk-trace 1.57.0 1.60.1
org.springframework.boot:spring-boot-autoconfigure 4.0.1 4.0.5
com.azure:azure-core 1.57.0 1.57.1
com.azure:azure-core-http-netty 1.16.2 1.16.3
com.microsoft.azure:applicationinsights-runtime-attach 3.7.6 3.7.8

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha from 2.23.0-alpha to 2.26.1-alpha

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's releases.

Version 2.26.0

This release targets the OpenTelemetry SDK 1.60.1.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

  • Remove deprecated AWS Lambda v2.2 wrappers and forceFlush(int, TimeUnit) overload (#16170)
  • Remove deprecated HTTP client/server methods (#16167)
  • Remove deprecated database instrumentation methods and classes (#16164)
  • Remove deprecated peer-service mapping APIs (#16165)
  • Make runtime-telemetry deprecated classes now internal (#16173)
  • Remove AttributesExtractorUtil (#16152)
  • Remove marker interface from SqlClientAttributesGetter (#16205)
  • Merge network/server getter methods into DB attribute getters (#16264, #16268)
  • Rename SQL sanitizer classes to SQL analyzer (#16269)
  • Rename internal common module packages to follow new naming convention (#16284, #16308, #16327, #16341, #16373)

🚫 Deprecations

  • Deprecated individual runtime-telemetry module classes in favor of unified module (#16087)
  • Deprecated old HTTP server query parameter methods in favor of sensitive query param handling (#16097)
  • Deprecated old RPC attributes getter methods in favor of new ones supporting stable semantic conventions (#16130)
  • Deprecated old ClickHouse instrumentation methods as part of simplification (#16206)
  • Deprecated old R2DBC methods in favor of ones supporting db.system.name (#16251)
  • Deprecated old DbClientAttributesGetter methods; added getErrorType() with implementations (#16276)
  • Deprecated old RPC metrics methods in favor of ones supporting stable semantic conventions (#16298)
  • Deprecated old DbClientAttributesGetter methods; added getDbName() to better support old/stable semconv split (#16318)

📈 Enhancements

  • Add server address and port attributes for Spymemcached (#15242)
  • Add Kafka Connect as a built-in JMX metrics target (#15561)
  • Convert Lettuce instrumentation to use Instrumenter (#15838)
  • OpenSearch Java client: capture sanitized search query bodies (#15634)
  • Apply stable semantic conventions to Camel JMX metrics (#16088)
  • Add jvm.file_descriptor.limit metric (#16174)
  • Run gRPC client callbacks with parent context (#16175)
  • SQL summary: handle EXPLAIN statements (#16184)
  • Simplify InfluxDB instrumentation (#16207)
  • Update histogram buckets for db.client.operation.duration (#16222)
  • SQL summary: support Oracle dblink syntax (#16230)
  • Add instrumentation for ZIO HTTP server route (#16232)
  • Remove network attributes under database stable semconv flag (#16257)
  • Support Javalin 7 (#16261)
  • gRPC: initial stable semconv support (#16304)
  • Populate os.version resource attribute (#16311)
  • Camel: don't emit db spans under stable semconv (#16275)
  • Dubbo: stable semconv support (#16352)
  • Update the OpenTelemetry SDK version to 1.60.0 (#16407)

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's changelog.

Changelog

Unreleased

🚫 Deprecations

  • Deprecated GraphQL builder methods setSanitizeQuery() and setAddOperationNameToSpanName(), and deprecated config key otel.instrumentation.graphql.add-operation-name-to-span-name.enabled in favor of setQuerySanitizationEnabled(), setOperationNameInSpanNameEnabled(), and otel.instrumentation.graphql.operation-name-in-span-name.enabled

Version 2.26.1 (2026-03-23)

🔒 Security fixes

  • Fix unsafe deserialization in RMI instrumentation that could lead to remote code execution (CVE-2026-33701, #16979)

Version 2.26.0 (2026-03-14)

⚠️ Breaking changes to non-stable APIs

  • Remove deprecated AWS Lambda v2.2 wrappers and forceFlush(int, TimeUnit) overload (#16170)
  • Remove deprecated HTTP client/server methods (#16167)
  • Remove deprecated database instrumentation methods and classes (#16164)
  • Remove deprecated peer-service mapping APIs (#16165)
  • Make runtime-telemetry deprecated classes now internal (#16173)
  • Remove AttributesExtractorUtil (#16152)
  • Remove marker interface from SqlClientAttributesGetter (#16205)
  • Merge network/server getter methods into DB attribute getters (#16264, #16268)
  • Rename SQL sanitizer classes to SQL analyzer (#16269)
  • Rename internal common module packages to follow new naming convention (#16284, #16308, #16327, #16341, #16373)

🚫 Deprecations

... (truncated)

Commits

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom from 2.23.0 to 2.26.1

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom's releases.

Version 2.26.1

This is a patch release on the previous 2.26.0 release, fixing the issue(s) below.

🔒 Security fixes

  • Fix unsafe deserialization in RMI instrumentation that could lead to remote code execution (CVE-2026-33701, #16979)

Version 2.26.0

This release targets the OpenTelemetry SDK 1.60.1.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

  • Remove deprecated AWS Lambda v2.2 wrappers and forceFlush(int, TimeUnit) overload (#16170)
  • Remove deprecated HTTP client/server methods (#16167)
  • Remove deprecated database instrumentation methods and classes (#16164)
  • Remove deprecated peer-service mapping APIs (#16165)
  • Make runtime-telemetry deprecated classes now internal (#16173)
  • Remove AttributesExtractorUtil (#16152)
  • Remove marker interface from SqlClientAttributesGetter (#16205)
  • Merge network/server getter methods into DB attribute getters (#16264, #16268)
  • Rename SQL sanitizer classes to SQL analyzer (#16269)
  • Rename internal common module packages to follow new naming convention (#16284, #16308, #16327, #16341, #16373)

🚫 Deprecations

  • Deprecated individual runtime-telemetry module classes in favor of unified module (#16087)
  • Deprecated old HTTP server query parameter methods in favor of sensitive query param handling (#16097)
  • Deprecated old RPC attributes getter methods in favor of new ones supporting stable semantic conventions (#16130)
  • Deprecated old ClickHouse instrumentation methods as part of simplification (#16206)
  • Deprecated old R2DBC methods in favor of ones supporting db.system.name (#16251)
  • Deprecated old DbClientAttributesGetter methods; added getErrorType() with implementations (#16276)
  • Deprecated old RPC metrics methods in favor of ones supporting stable semantic conventions (#16298)
  • Deprecated old DbClientAttributesGetter methods; added getDbName() to better support old/stable semconv split (#16318)

📈 Enhancements

  • Add server address and port attributes for Spymemcached (#15242)
  • Add Kafka Connect as a built-in JMX metrics target (#15561)
  • Convert Lettuce instrumentation to use Instrumenter (#15838)
  • OpenSearch Java client: capture sanitized search query bodies (#15634)
  • Apply stable semantic conventions to Camel JMX metrics (#16088)
  • Add jvm.file_descriptor.limit metric (#16174)
  • Run gRPC client callbacks with parent context (#16175)
  • SQL summary: handle EXPLAIN statements (#16184)
  • Simplify InfluxDB instrumentation (#16207)
  • Update histogram buckets for db.client.operation.duration (#16222)
  • SQL summary: support Oracle dblink syntax (#16230)
  • Add instrumentation for ZIO HTTP server route (#16232)

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom's changelog.

Version 2.26.1 (2026-03-23)

🔒 Security fixes

  • Fix unsafe deserialization in RMI instrumentation that could lead to remote code execution (CVE-2026-33701, #16979)

Version 2.26.0 (2026-03-14)

⚠️ Breaking changes to non-stable APIs

  • Remove deprecated AWS Lambda v2.2 wrappers and forceFlush(int, TimeUnit) overload (#16170)
  • Remove deprecated HTTP client/server methods (#16167)
  • Remove deprecated database instrumentation methods and classes (#16164)
  • Remove deprecated peer-service mapping APIs (#16165)
  • Make runtime-telemetry deprecated classes now internal (#16173)
  • Remove AttributesExtractorUtil (#16152)
  • Remove marker interface from SqlClientAttributesGetter (#16205)
  • Merge network/server getter methods into DB attribute getters (#16264, #16268)
  • Rename SQL sanitizer classes to SQL analyzer (#16269)
  • Rename internal common module packages to follow new naming convention (#16284, #16308, #16327, #16341, #16373)

🚫 Deprecations

  • Deprecated individual runtime-telemetry module classes in favor of unified module (#16087)
  • Deprecated old HTTP server query parameter methods in favor of sensitive query param handling (#16097)
  • Deprecated old RPC attributes getter methods in favor of new ones supporting stable semantic conventions (#16130)
  • Deprecated old ClickHouse instrumentation methods as part of simplification (#16206)
  • Deprecated old R2DBC methods in favor of ones supporting db.system.name

... (truncated)

Commits

Updates com.microsoft.azure:applicationinsights-agent from 3.7.6 to 3.7.8

Release notes

Sourced from com.microsoft.azure:applicationinsights-agent's releases.

Application Insights Java 3.7.8 (GA)

  • Update to OpenTelemetry Java Instrumentation 2.26.1 (#4648, #4632, #4631)
  • Add cgroupv2 support and fix profile upload response body reading (#4592)
  • Fix connection string env var precedence over ${file:...} config lookup (#4608)

Application Insights Java 3.7.7 (GA)

Enhancements

  • Update to OpenTelemetry Java Instrumentation 2.21.0 (#4511)
  • Enable Spring Cloud Gateway instrumentation (#4559)
  • Add azure_monitor to metrics exporter for AKS (#4575)
Changelog

Sourced from com.microsoft.azure:applicationinsights-agent's changelog.

Version 3.7.8 GA (03/24/2026)

  • Update to OpenTelemetry Java Instrumentation 2.26.1 (#4648, #4632, #4631)
  • Add cgroupv2 support and fix profile upload response body reading (#4592)
  • Fix connection string env var precedence over ${file:...} config lookup (#4608)

Version 3.7.7 GA (01/23/2026)

Enhancements

  • Update to OpenTelemetry Java Instrumentation 2.21.0 (#4511)
  • Enable Spring Cloud Gateway instrumentation (#4559)
  • Add azure_monitor to metrics exporter for AKS (#4575)
Commits
  • ec997a0 Prepare to release 3.7.8 (#4659)
  • 8aaef21 Bump com.github.jk1.dependency-license-report from 3.0.1 to 3.1.1 (#4662)
  • 444388a Bump org.junit:junit-bom from 5.14.2 to 5.14.3 (#4651)
  • 1aea3e1 Bump com.fasterxml.jackson:jackson-bom from 2.21.1 to 2.21.2 (#4664)
  • 16188e9 Bump com.gradleup.shadow:shadow-gradle-plugin from 8.3.9 to 9.4.0 (#4656)
  • c915c20 Bump io.netty:netty-bom from 4.2.11.Final to 4.2.12.Final (#4666)
  • 0453d3f Bump the testcontainers group with 2 updates (#4650)
  • d205c49 Bump io.opentelemetry.instrumentation:gradle-plugins from 2.19.0-alpha to 2.2...
  • 0b66e7a Bump gradle-wrapper from 9.4.0 to 9.4.1 (#4663)
  • 741fb04 Bump io.netty:netty-bom from 4.2.9.Final to 4.2.11.Final (#4661)
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-maven-plugin from 4.0.1 to 4.0.5

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v4.0.5

🐞 Bug Fixes

  • Test starter for Spring Integration does not include Spring Integration test module #49784
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #49782
  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #49753
  • WebSocket app fails to start when Jackson is on the classpath but there's no JsonMapper bean #49749
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #49738
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #49731
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #49706
  • Add @ConditionalOnWebApplication to NettyReactiveWebServerAutoConfiguration #49695
  • @GraphQlTest does not include @ControllerAdvice #49672

📔 Documentation

  • Fix incorrect indefinite articles in Javadoc #49727
  • Add some more Kotlin examples and trivial style fixes #49714
  • Overhaul Spring Session documentation following modularization #49704

🔨 Dependency Upgrades

  • Upgrade to Brave 6.3.1 #49763
  • Upgrade to Jackson 2 Bom 2.21.2 #49764
  • Upgrade to jOOQ 3.19.31 #49765
  • Upgrade to Netty 4.2.12.Final #49794
  • Upgrade to Tomcat 11.0.20 #49767
  • Upgrade to Zipkin Reporter 3.5.3 #49762

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, @​kwondh5217, @​ljrmorgan, and @​quaff

v4.0.4

⚠️ Attention Required

  • OpenTelemetry's ZipkinSpanExporter has been deprecated and its support will be removed in Spring Boot 4.2. #49453
  • Jackson 2 has been upgraded to 2.21.1 in response to the Jackson team ending support for Jackson 2.20.x. #49389
  • Jackson has been upgraded to 3.1.0 in response to the Jackson team ending support for Jackson 3.0.x. #49383
  • The default value for server.tomcat.max-part-count has been increased from 10 to 50. This aligns it with Tomcat's own default and the default in Spring Boot 3.x. #49311

🐞 Bug Fixes

  • EndpointRequest request matcher for health groups is too complex #49649
  • "/cloudfoundryapplication" web path is not limited to Actuator #49646
  • Fix EndpointRequest.toLinks() when base-path is '/' #49617
  • Docker fails when a 'tcp://' address ends with a slash (for example 'tcp://docker:2375/') #49596
  • RSocket exposes duplicate endpoint for websocket setups #49593
  • Failure analysis for a missing mail sender is misleading #49582

... (truncated)

Commits
  • fe74b31 Release v4.0.5
  • e1d6e5a Merge branch '3.5.x' into 4.0.x
  • 6c9e52a Next development version (v3.5.14-SNAPSHOT)
  • a413e95 Upgrade to Netty 4.2.12.Final
  • c1694b5 Add missing Spring Integration test module to the relevant starter
  • 51ffdc6 Merge branch '3.5.x' into 4.0.x
  • 696a60e Full auto-configure transaction management in slice tests
  • ba70d41 Upgrade to Tomcat 11.0.20
  • fd94ca0 Upgrade to Netty 4.2.11.Final
  • 7e6833b Upgrade to jOOQ 3.19.31
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-dependency-plugin from 3.9.0 to 3.10.0

Release notes

Sourced from org.apache.maven.plugins:maven-dependency-plugin's releases.

3.10.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 4127c33 [maven-release-plugin] prepare release maven-dependency-plugin-3.10.0
  • 68b5e47 Add analyze-only to usage page
  • 09d5860 Fix Jenkin bages in README
  • 4308f6c Bump org.apache.maven.shared:maven-dependency-analyzer
  • ba3c570 Apply excludeReactor to plugin dependencies in go-offline and resolve-plugins
  • 0d88b66 Only log dependency classpath when no property/file output is specified
  • 0075e31 Bump org.assertj:assertj-core (#1581)
  • 65d53bb Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 (#1582)
  • eaf54f0 Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1 (#1580)
  • ece9a38 Improve dependencies filtering in AbstractAnalyzeMojo
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-api from 1.57.0 to 1.60.1

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.60.1

This is a patch release on the previous 1.60.0 release, fixing the issue(s) below.

SDK

Extensions

  • Autoconfigure: fix warning always emitted (#8157)

Version 1.60.0

API

  • Support W3C trace context random flag (#8012)
  • Clarify that SpanBuilder.setAttribute allows null values (#8072)

Incubating

  • Implement environment variable context propagation carriers (#8074)
  • Deprecate ExtendedAttributes, ExtendedAttributeKey, ExtendedAttributeType, ExtendedAttributesBuilder (#8060)
  • Deprecate peerServiceMapping accessor from InstrumentationConfigUtil (#8088)

SDK

Traces

  • Disable warning when using TraceIdRatioBasedSampler as root sampler (#8065)
  • User-supplied attributes take precedence over exception-derived attributes (#7993)
  • Exclude META-INF/maven from traces SDK shaded dependencies (#8096)
  • Fix inverted condition in LegacySpanProcessorInstrumentation#finishSpans (#8145)

Metrics

  • Split out cumulative vs. delta storage (#8015)
  • Add metrics for PeriodicMetricReader (#8038)
  • Allow configuring min/max in histograms (#8095)
  • Remove deprecated otel.experimental.metrics.cardinality.limit property (#8124)
  • BREAKING bug fix: GlobUtil and IncludePatternMatching, used in views and declarative config matching, previously were inconsistent in case sensitivity. If a glob char (* or ?) was present, it was evaluated with case sensitivity. If no glob chars were present, it was evaluated with case insensitivity. Now, all are consistently evaluated with case sensitivity. (#8152)

Logs

  • Stabilize LogRecordBuilder.setException (#8089)
  • Clarify setTimestamp javadoc for event timestamp behavior (#8104)

Exporters

  • OTLP: Fix marshaling for empty string attributes (#8014)
  • Prometheus: Update Prometheus client to 1.5.0 (#8080)
  • OTLP: Serialize exponential histogram sum as optional double (#8107)
  • OTLP: Use KeyManagerFactory.getDefaultAlgorithm() in TlsUtil.keyManager() (#8122)
  • OTLP: Ensure proto serializer idCache is cleared when exception is thrown (#8147)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.60.1 (2026-03-08)

SDK

Extensions

  • Autoconfigure: fix warning always emitted (#8157)

Version 1.60.0 (2026-03-06)

API

  • Support W3C trace context random flag (#8012)
  • Clarify that SpanBuilder.setAttribute allows null values (#8072)

Incubating

  • Implement environment variable context propagation carriers (#8074)
  • Deprecate ExtendedAttributes, ExtendedAttributeKey, ExtendedAttributeType, ExtendedAttributesBuilder (#8060)
  • Deprecate peerServiceMapping accessor from InstrumentationConfigUtil (#8088)

SDK

Traces

  • Disable warning when using TraceIdRatioBasedSampler as root sampler (#8065)
  • User-supplied attributes take precedence over exception-derived attributes (#7993)
  • Exclude META-INF/maven from traces SDK shaded dependencies (#8096)
  • Fix inverted condition in LegacySpanProcessorInstrumentation#finishSpans (#8145)

Metrics

  • Split out cumulative vs. delta storage (#8015)
  • Add metrics for PeriodicMetricReader (#8038)
  • Allow configuring min/max in histograms (#8095)
  • Remove deprecated otel.experimental.metrics.cardinality.limit property

... (truncated)

Commits
  • b1273b5 [release/v1.60.x] Prepare release 1.60.1 (#8161)
  • 76e74af Prepare changelog for 1.60.1 (#8160)
  • e4235e2 [release/v1.60.x] Fix warning always emitted (#8158)
  • 58a5590 [release/v1.60.x] Change GlobUtil, IncludeExcludePredicate to use case sensit...
  • 299d893 Add changelog entry for #8152 to 1.60.x release branch (#8154)
  • 5d329ae [release/v1.60.x] Prepare release 1.60.0 (#8151)
  • 99857c6 Prepare for 1.60.0 release (

@dependabot
Bump the all-dependencies group across 1 directory with 28 updates
b075fc5 
Bumps the all-dependencies group with 28 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.23.0-alpha` | `2.26.1-alpha` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.23.0` | `2.26.1` |
| [com.microsoft.azure:applicationinsights-agent](https://github.com/Microsoft/ApplicationInsights-Java) | `3.7.6` | `3.7.8` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `4.0.1` | `4.0.5` |
| [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.9.0` | `3.10.0` |
| [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.57.0` | `1.60.1` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.23.0` | `2.26.1` |
| [com.microsoft.azure:applicationinsights-web](https://github.com/Microsoft/ApplicationInsights-Java) | `3.7.6` | `3.7.8` |
| [io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.23.0-alpha` | `2.26.1-alpha` |
| org.apache.logging.log4j:log4j-api | `2.25.3` | `2.25.4` |
| org.apache.logging.log4j:log4j-core | `2.25.3` | `2.25.4` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.23` | `1.5.32` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.23` | `1.5.32` |
| [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `6.0.1` | `6.0.3` |
| [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework) | `6.0.1` | `6.0.3` |
| org.apache.logging.log4j:log4j-slf4j2-impl | `2.25.3` | `2.25.4` |
| org.apache.logging.log4j:log4j-slf4j-impl | `2.25.3` | `2.25.4` |
| [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) | `1.16.1` | `1.16.4` |
| [io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi](https://github.com/open-telemetry/opentelemetry-java) | `1.57.0` | `1.60.1` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-api](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.23.0` | `2.26.1` |
| [io.opentelemetry.javaagent:opentelemetry-javaagent-extension-api](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.23.0-alpha` | `2.26.1-alpha` |
| [org.apache.maven.plugins:maven-resources-plugin](https://github.com/apache/maven-resources-plugin) | `3.4.0` | `3.5.0` |
| [io.opentelemetry:opentelemetry-sdk-common](https://github.com/open-telemetry/opentelemetry-java) | `1.57.0` | `1.60.1` |
| [io.opentelemetry:opentelemetry-sdk-trace](https://github.com/open-telemetry/opentelemetry-java) | `1.57.0` | `1.60.1` |
| [org.springframework.boot:spring-boot-autoconfigure](https://github.com/spring-projects/spring-boot) | `4.0.1` | `4.0.5` |
| [com.azure:azure-core](https://github.com/Azure/azure-sdk-for-java) | `1.57.0` | `1.57.1` |
| [com.azure:azure-core-http-netty](https://github.com/Azure/azure-sdk-for-java) | `1.16.2` | `1.16.3` |
| [com.microsoft.azure:applicationinsights-runtime-attach](https://github.com/Microsoft/ApplicationInsights-Java) | `3.7.6` | `3.7.8` |



Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha` from 2.23.0-alpha to 2.26.1-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom` from 2.23.0 to 2.26.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java-instrumentation@v2.23.0...v2.26.1)

Updates `com.microsoft.azure:applicationinsights-agent` from 3.7.6 to 3.7.8
- [Release notes](https://github.com/Microsoft/ApplicationInsights-Java/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-Java/blob/main/CHANGELOG.md)
- [Commits](microsoft/ApplicationInsights-Java@3.7.6...3.7.8)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 4.0.1 to 4.0.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.5)

Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.9.0 to 3.10.0
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.9.0...maven-dependency-plugin-3.10.0)

Updates `io.opentelemetry:opentelemetry-api` from 1.57.0 to 1.60.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.57.0...v1.60.1)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations` from 2.23.0 to 2.26.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java-instrumentation@v2.23.0...v2.26.1)

Updates `com.microsoft.azure:applicationinsights-web` from 3.7.6 to 3.7.8
- [Release notes](https://github.com/Microsoft/ApplicationInsights-Java/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-Java/blob/main/CHANGELOG.md)
- [Commits](microsoft/ApplicationInsights-Java@3.7.6...3.7.8)

Updates `io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17` from 2.23.0-alpha to 2.26.1-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits)

Updates `org.apache.logging.log4j:log4j-api` from 2.25.3 to 2.25.4

Updates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4

Updates `ch.qos.logback:logback-core` from 1.5.23 to 1.5.32
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.23...v_1.5.32)

Updates `ch.qos.logback:logback-classic` from 1.5.23 to 1.5.32
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.23...v_1.5.32)

Updates `org.junit.jupiter:junit-jupiter-api` from 6.0.1 to 6.0.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.1...r6.0.3)

Updates `org.junit.jupiter:junit-jupiter-engine` from 6.0.1 to 6.0.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.1...r6.0.3)

Updates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.25.3 to 2.25.4

Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.3 to 2.25.4

Updates `io.micrometer:micrometer-core` from 1.16.1 to 1.16.4
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.16.1...v1.16.4)

Updates `io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi` from 1.57.0 to 1.60.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.57.0...v1.60.1)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-api` from 2.23.0 to 2.26.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java-instrumentation@v2.23.0...v2.26.1)

Updates `io.opentelemetry.javaagent:opentelemetry-javaagent-extension-api` from 2.23.0-alpha to 2.26.1-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits)

Updates `org.apache.maven.plugins:maven-resources-plugin` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/apache/maven-resources-plugin/releases)
- [Commits](apache/maven-resources-plugin@v3.4.0...maven-resources-plugin-3.5.0)

Updates `io.opentelemetry:opentelemetry-sdk-common` from 1.57.0 to 1.60.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.57.0...v1.60.1)

Updates `io.opentelemetry:opentelemetry-sdk-trace` from 1.57.0 to 1.60.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.57.0...v1.60.1)

Updates `org.springframework.boot:spring-boot-autoconfigure` from 4.0.1 to 4.0.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.5)

Updates `com.azure:azure-core` from 1.57.0 to 1.57.1
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@azure-core_1.57.0...com.azure+azure-core_1.57.1)

Updates `com.azure:azure-core-http-netty` from 1.16.2 to 1.16.3
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@azure-identity_1.16.2...azure-identity_1.16.3)

Updates `com.microsoft.azure:applicationinsights-runtime-attach` from 3.7.6 to 3.7.8
- [Release notes](https://github.com/Microsoft/ApplicationInsights-Java/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-Java/blob/main/CHANGELOG.md)
- [Commits](microsoft/ApplicationInsights-Java@3.7.6...3.7.8)

---
updated-dependencies:
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha
  dependency-version: 2.26.1-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.microsoft.azure:applicationinsights-agent
  dependency-version: 3.7.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.60.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.microsoft.azure:applicationinsights-web
  dependency-version: 3.7.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17
  dependency-version: 2.26.1-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-api
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: io.micrometer:micrometer-core
  dependency-version: 1.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi
  dependency-version: 1.60.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-api
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry.javaagent:opentelemetry-javaagent-extension-api
  dependency-version: 2.26.1-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.apache.maven.plugins:maven-resources-plugin
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk-common
  dependency-version: 1.60.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk-trace
  dependency-version: 1.60.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.springframework.boot:spring-boot-autoconfigure
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: com.azure:azure-core
  dependency-version: 1.57.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: com.azure:azure-core-http-netty
  dependency-version: 1.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: com.microsoft.azure:applicationinsights-runtime-attach
  dependency-version: 3.7.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Mar 30, 2026
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Mar 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@harsimar harsimar Awaiting requested review from harsimar harsimar is a code owner

@heyams heyams Awaiting requested review from heyams heyams is a code owner

@jeanbisutti jeanbisutti Awaiting requested review from jeanbisutti jeanbisutti is a code owner

@ramthi ramthi Awaiting requested review from ramthi ramthi is a code owner

@trask trask Awaiting requested review from trask trask is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants