Skip to content

Bump the all group with 8 updates - #922

Open
dependabot[bot] wants to merge 5 commits into
masterfrom
dependabot/maven/all-5e073a9974
Open

dependabot[bot] wants to merge 5 commits into
masterfrom
dependabot/maven/all-5e073a9974

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 8 updates:

Package From To
org.conscrypt:conscrypt-openjdk-uber 2.7.0 2.8.0
com.github.luben:zstd-jni 1.5.7-22 1.5.7-25
io.micrometer:micrometer-core 1.17.1 1.17.2
io.micrometer:micrometer-observation 1.17.1 1.17.2
io.micrometer:micrometer-registry-prometheus 1.17.1 1.17.2
io.micrometer:micrometer-tracing 1.7.1 1.7.2
io.micrometer:micrometer-tracing-bridge-otel 1.7.1 1.7.2
io.opentelemetry:opentelemetry-bom 1.66.0 1.67.0

Updates org.conscrypt:conscrypt-openjdk-uber from 2.7.0 to 2.8.0

Release notes

Sourced from org.conscrypt:conscrypt-openjdk-uber's releases.

v2.8.0

Conscrypt Version 2.8.0.

This is a new release of conscrypt-openjdk, conscrypt-openjdk-uber and conscrypt-android on maven.

It includes the following changes:

  • Support for XChaCha20-Poly1305 (XChaCha20/Poly1305/NoPadding cipher, XChaCha20 KeyGenerator, and XChaCha20 AlgorithmParameters).
  • Bug fixes, error handling improvements, and cleanups.
Commits
  • 7cff5d9 Merge pull request #1553 from google/google3-export
  • 52069ae Project import generated by Copybara.
  • e8bac4c Add KEM and KDF interface and implementations. (#1551)
  • d8840cc Project import generated by Copybara. (#1549)
  • c528536 Project import generated by Copybara. (#1548)
  • 9add7ce Add OpenSSLX509CRLTest. (#1547)
  • 9af1f30 Make TestSSLContext implement Closeable and adopt try-with-resources.- #1545 ...
  • 6461a8a Pass explicit TestSSLContext to TestSSLEnginePair.create() and close after te...
  • 538dd33 Add some tests for ML-KEM and ML-DSA, and add check for HKDF. (#1543)
  • 53f333b Re-enabled some tests in NativeCryptoTest. (#1542)
  • Additional commits viewable in compare view

Updates com.github.luben:zstd-jni from 1.5.7-22 to 1.5.7-25

Commits

Updates io.micrometer:micrometer-core from 1.17.1 to 1.17.2

Release notes

Sourced from io.micrometer:micrometer-core's releases.

1.17.2

🐞 Bug Fixes

  • Preserve whitespace in HTTP Basic authentication passwords #8015
  • Missing reflection hint for getProcessCpuTime #7911
  • Proxy JMS session results using the method's declared return type #7896
  • Kotlin interoperability for CaffeineCacheMetrics broken/requires unchecked cast to work #7582
  • Registering/Updating a MultiGauge while a Prometheus scrape occurs can lead to DuplicateLabelsException #6851
  • OTLP histogram bucket count does not equal count intermittently #6006
  • Statsd UDP epoll warn logs are verbose when statsd is down #2624

📔 Documentation

  • Fix typos in docs #8000
  • Add docs for @MeterTag when used on a method #7829
  • Document best practice about configuring registries on a composite #7367
  • Documentation on SpelValueExpressionResolver is unclear #6465
  • Document how to customize tags in micrometer-java11 HttpClient instrumentation #4962

🔨 Dependency Upgrades

  • Bump io.netty:netty-bom from 4.2.18.Final to 4.2.19.Final #8042

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Gaurav1112, @​LindseyZ1205, @​bogdandrutu, @​pchesneau, @​cfcromn, @​schiemon, @​officialasishkumar, @​AzazelSensei, @​nick-montana, @​ghdtjdwn, @​ninadsutrave

Commits
  • b52db89 Merge branch '1.16.x' into 1.17.x
  • 3bf1fd5 Avoid logging a warning for every packet when the StatsD UDP server is down (...
  • 801094f Merge branch '1.16.x' into 1.17.x
  • 40aa268 Preserve whitespace in HTTP Basic authentication passwords (#8015)
  • c61adef Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.4 to 5.6.5 (#8068)
  • 328e98f Resolve compiler warnings and deprecations on 1.17.x (#8055)
  • d31e871 Merge branch '1.16.x' into 1.17.x
  • 4835582 Exclude web fonts from generated documentation only for JDK 23+
  • be2a0e4 Disable build cache in release train build action
  • b196978 Upgrade github-actions-workflow-generator to 0.0.7
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-observation from 1.17.1 to 1.17.2

Release notes

Sourced from io.micrometer:micrometer-observation's releases.

1.17.2

🐞 Bug Fixes

  • Preserve whitespace in HTTP Basic authentication passwords #8015
  • Missing reflection hint for getProcessCpuTime #7911
  • Proxy JMS session results using the method's declared return type #7896
  • Kotlin interoperability for CaffeineCacheMetrics broken/requires unchecked cast to work #7582
  • Registering/Updating a MultiGauge while a Prometheus scrape occurs can lead to DuplicateLabelsException #6851
  • OTLP histogram bucket count does not equal count intermittently #6006
  • Statsd UDP epoll warn logs are verbose when statsd is down #2624

📔 Documentation

  • Fix typos in docs #8000
  • Add docs for @MeterTag when used on a method #7829
  • Document best practice about configuring registries on a composite #7367
  • Documentation on SpelValueExpressionResolver is unclear #6465
  • Document how to customize tags in micrometer-java11 HttpClient instrumentation #4962

🔨 Dependency Upgrades

  • Bump io.netty:netty-bom from 4.2.18.Final to 4.2.19.Final #8042

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Gaurav1112, @​LindseyZ1205, @​bogdandrutu, @​pchesneau, @​cfcromn, @​schiemon, @​officialasishkumar, @​AzazelSensei, @​nick-montana, @​ghdtjdwn, @​ninadsutrave

Commits
  • b52db89 Merge branch '1.16.x' into 1.17.x
  • 3bf1fd5 Avoid logging a warning for every packet when the StatsD UDP server is down (...
  • 801094f Merge branch '1.16.x' into 1.17.x
  • 40aa268 Preserve whitespace in HTTP Basic authentication passwords (#8015)
  • c61adef Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.4 to 5.6.5 (#8068)
  • 328e98f Resolve compiler warnings and deprecations on 1.17.x (#8055)
  • d31e871 Merge branch '1.16.x' into 1.17.x
  • 4835582 Exclude web fonts from generated documentation only for JDK 23+
  • be2a0e4 Disable build cache in release train build action
  • b196978 Upgrade github-actions-workflow-generator to 0.0.7
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-registry-prometheus from 1.17.1 to 1.17.2

Release notes

Sourced from io.micrometer:micrometer-registry-prometheus's releases.

1.17.2

🐞 Bug Fixes

  • Preserve whitespace in HTTP Basic authentication passwords #8015
  • Missing reflection hint for getProcessCpuTime #7911
  • Proxy JMS session results using the method's declared return type #7896
  • Kotlin interoperability for CaffeineCacheMetrics broken/requires unchecked cast to work #7582
  • Registering/Updating a MultiGauge while a Prometheus scrape occurs can lead to DuplicateLabelsException #6851
  • OTLP histogram bucket count does not equal count intermittently #6006
  • Statsd UDP epoll warn logs are verbose when statsd is down #2624

📔 Documentation

  • Fix typos in docs #8000
  • Add docs for @MeterTag when used on a method #7829
  • Document best practice about configuring registries on a composite #7367
  • Documentation on SpelValueExpressionResolver is unclear #6465
  • Document how to customize tags in micrometer-java11 HttpClient instrumentation #4962

🔨 Dependency Upgrades

  • Bump io.netty:netty-bom from 4.2.18.Final to 4.2.19.Final #8042

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Gaurav1112, @​LindseyZ1205, @​bogdandrutu, @​pchesneau, @​cfcromn, @​schiemon, @​officialasishkumar, @​AzazelSensei, @​nick-montana, @​ghdtjdwn, @​ninadsutrave

Commits
  • b52db89 Merge branch '1.16.x' into 1.17.x
  • 3bf1fd5 Avoid logging a warning for every packet when the StatsD UDP server is down (...
  • 801094f Merge branch '1.16.x' into 1.17.x
  • 40aa268 Preserve whitespace in HTTP Basic authentication passwords (#8015)
  • c61adef Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.4 to 5.6.5 (#8068)
  • 328e98f Resolve compiler warnings and deprecations on 1.17.x (#8055)
  • d31e871 Merge branch '1.16.x' into 1.17.x
  • 4835582 Exclude web fonts from generated documentation only for JDK 23+
  • be2a0e4 Disable build cache in release train build action
  • b196978 Upgrade github-actions-workflow-generator to 0.0.7
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-observation from 1.17.1 to 1.17.2

Release notes

Sourced from io.micrometer:micrometer-observation's releases.

1.17.2

🐞 Bug Fixes

  • Preserve whitespace in HTTP Basic authentication passwords #8015
  • Missing reflection hint for getProcessCpuTime #7911
  • Proxy JMS session results using the method's declared return type #7896
  • Kotlin interoperability for CaffeineCacheMetrics broken/requires unchecked cast to work #7582
  • Registering/Updating a MultiGauge while a Prometheus scrape occurs can lead to DuplicateLabelsException #6851
  • OTLP histogram bucket count does not equal count intermittently #6006
  • Statsd UDP epoll warn logs are verbose when statsd is down #2624

📔 Documentation

  • Fix typos in docs #8000
  • Add docs for @MeterTag when used on a method #7829
  • Document best practice about configuring registries on a composite #7367
  • Documentation on SpelValueExpressionResolver is unclear #6465
  • Document how to customize tags in micrometer-java11 HttpClient instrumentation #4962

🔨 Dependency Upgrades

  • Bump io.netty:netty-bom from 4.2.18.Final to 4.2.19.Final #8042

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Gaurav1112, @​LindseyZ1205, @​bogdandrutu, @​pchesneau, @​cfcromn, @​schiemon, @​officialasishkumar, @​AzazelSensei, @​nick-montana, @​ghdtjdwn, @​ninadsutrave

Commits
  • b52db89 Merge branch '1.16.x' into 1.17.x
  • 3bf1fd5 Avoid logging a warning for every packet when the StatsD UDP server is down (...
  • 801094f Merge branch '1.16.x' into 1.17.x
  • 40aa268 Preserve whitespace in HTTP Basic authentication passwords (#8015)
  • c61adef Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.4 to 5.6.5 (#8068)
  • 328e98f Resolve compiler warnings and deprecations on 1.17.x (#8055)
  • d31e871 Merge branch '1.16.x' into 1.17.x
  • 4835582 Exclude web fonts from generated documentation only for JDK 23+
  • be2a0e4 Disable build cache in release train build action
  • b196978 Upgrade github-actions-workflow-generator to 0.0.7
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-registry-prometheus from 1.17.1 to 1.17.2

Release notes

Sourced from io.micrometer:micrometer-registry-prometheus's releases.

1.17.2

🐞 Bug Fixes

  • Preserve whitespace in HTTP Basic authentication passwords #8015
  • Missing reflection hint for getProcessCpuTime #7911
  • Proxy JMS session results using the method's declared return type #7896
  • Kotlin interoperability for CaffeineCacheMetrics broken/requires unchecked cast to work #7582
  • Registering/Updating a MultiGauge while a Prometheus scrape occurs can lead to DuplicateLabelsException #6851
  • OTLP histogram bucket count does not equal count intermittently #6006
  • Statsd UDP epoll warn logs are verbose when statsd is down #2624

📔 Documentation

  • Fix typos in docs #8000
  • Add docs for @MeterTag when used on a method #7829
  • Document best practice about configuring registries on a composite #7367
  • Documentation on SpelValueExpressionResolver is unclear #6465
  • Document how to customize tags in micrometer-java11 HttpClient instrumentation #4962

🔨 Dependency Upgrades

  • Bump io.netty:netty-bom from 4.2.18.Final to 4.2.19.Final #8042

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Gaurav1112, @​LindseyZ1205, @​bogdandrutu, @​pchesneau, @​cfcromn, @​schiemon, @​officialasishkumar, @​AzazelSensei, @​nick-montana, @​ghdtjdwn, @​ninadsutrave

Commits
  • b52db89 Merge branch '1.16.x' into 1.17.x
  • 3bf1fd5 Avoid logging a warning for every packet when the StatsD UDP server is down (...
  • 801094f Merge branch '1.16.x' into 1.17.x
  • 40aa268 Preserve whitespace in HTTP Basic authentication passwords (#8015)
  • c61adef Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.4 to 5.6.5 (#8068)
  • 328e98f Resolve compiler warnings and deprecations on 1.17.x (#8055)
  • d31e871 Merge branch '1.16.x' into 1.17.x
  • 4835582 Exclude web fonts from generated documentation only for JDK 23+
  • be2a0e4 Disable build cache in release train build action
  • b196978 Upgrade github-actions-workflow-generator to 0.0.7
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-tracing from 1.7.1 to 1.7.2

Release notes

Sourced from io.micrometer:micrometer-tracing's releases.

1.7.2

🐞 Bug Fixes

  • OtelTracer.nextSpan(parent) makes a stale context current while starting the child span #1605
  • Baggage Tags are not propagated unless explicit getBaggage call to Tracer #933

📔 Documentation

  • Remove warning about zipkin dependency in docs #509

🔨 Dependency Upgrades

  • Bump io.micrometer:micrometer-bom from 1.17.1 to 1.17.2 #1587

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​AzazelSensei and @​o-shevchenko

Commits
  • e1a3dca Bump io.micrometer:micrometer-bom from 1.17.1 to 1.17.2
  • c297db3 Build 1.7.x and 1.8.x with JDK 26
  • fd9d0e3 Merge branch '1.6.x' into 1.7.x
  • 988bd16 Do not make parent context current in OtelTracer.nextSpan(parent) (#1606)
  • c64e013 Merge branch '1.6.x' into 1.7.x
  • 1f7b668 Start spans with the baggage stored in the parent trace context (#1548)
  • 80c1596 Merge branch '1.6.x' into 1.7.x
  • 0c86bcf Bump com.diffplug.spotless:spotless-plugin-gradle from 8.10.3 to 8.10.4 (#1596)
  • c2fb1c0 Bump com.diffplug.spotless:spotless-plugin-gradle from 8.10.3 to 8.10.4 (#1594)
  • f510f91 Merge branch '1.6.x' into 1.7.x
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-tracing-bridge-otel from 1.7.1 to 1.7.2

Release notes

Sourced from io.micrometer:micrometer-tracing-bridge-otel's releases.

1.7.2

🐞 Bug Fixes

  • OtelTracer.nextSpan(parent) makes a stale context current while starting the child span #1605
  • Baggage Tags are not propagated unless explicit getBaggage call to Tracer #933

📔 Documentation

  • Remove warning about zipkin dependency in docs #509

🔨 Dependency Upgrades

  • Bump io.micrometer:micrometer-bom from 1.17.1 to 1.17.2 #1587

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​AzazelSensei and @​o-shevchenko

Commits
  • e1a3dca Bump io.micrometer:micrometer-bom from 1.17.1 to 1.17.2
  • c297db3 Build 1.7.x and 1.8.x with JDK 26
  • fd9d0e3 Merge branch '1.6.x' into 1.7.x
  • 988bd16 Do not make parent context current in OtelTracer.nextSpan(parent) (#1606)
  • c64e013 Merge branch '1.6.x' into 1.7.x
  • 1f7b668 Start spans with the baggage stored in the parent trace context (#1548)
  • 80c1596 Merge branch '1.6.x' into 1.7.x
  • 0c86bcf Bump com.diffplug.spotless:spotless-plugin-gradle from 8.10.3 to 8.10.4 (#1596)
  • c2fb1c0 Bump com.diffplug.spotless:spotless-plugin-gradle from 8.10.3 to 8.10.4 (#1594)
  • f510f91 Merge branch '1.6.x' into 1.7.x
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-tracing-bridge-otel from 1.7.1 to 1.7.2

Release notes

Sourced from io.micrometer:micrometer-tracing-bridge-otel's releases.

1.7.2

🐞 Bug Fixes

  • OtelTracer.nextSpan(parent) makes a stale context current while starting the child span #1605
  • Baggage Tags are not propagated unless explicit getBaggage call to Tracer #933

📔 Documentation

  • Remove warning about zipkin dependency in docs #509

🔨 Dependency Upgrades

  • Bump io.micrometer:micrometer-bom from 1.17.1 to 1.17.2 #1587

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​AzazelSensei and @​o-shevchenko

Commits
  • e1a3dca Bump io.micrometer:micrometer-bom from 1.17.1 to 1.17.2
  • c297db3 Build 1.7.x and 1.8.x with JDK 26
  • fd9d0e3 Merge branch '1.6.x' into 1.7.x
  • 988bd16 Do not make parent context current in OtelTracer.nextSpan(parent) (#1606)
  • c64e013 Merge branch '1.6.x' into 1.7.x
  • 1f7b668 Start spans with the baggage stored in the parent trace context (#1548)
  • 80c1596 Merge branch '1.6.x' into 1.7.x
  • 0c86bcf Bump com.diffplug.spotless:spotless-plugin-gradle from 8.10.3 to 8.10.4 (#1596)
  • c2fb1c0 Bump com.diffplug.spotless:spotless-plugin-gradle from 8.10.3 to 8.10.4 (#1594)
  • f510f91 Merge branch '1.6.x' into 1.7.x
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-bom from 1.66.0 to 1.67.0

Release notes

Sourced from io.opentelemetry:opentelemetry-bom's releases.

Version 1.67.0

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

Logs

  • Return noop loggers from SdkLoggerProvider.get() when no log record processors are configured (#8838)
  • Catch Throwable in SimpleLogRecordProcessor and MultiLogRecordExporter (#8848)

Profiles

  • Fix KeyValueAndUnitData.create() to return the public KeyValueAndUnitData interface (#8875)

Exporters

  • OTLP: Fix missing request size limits, defaulting to 64 MiB, configurable through setMaxRequestBodySize(long) and setMaxRequestMessageSize(long) and through declarative config OtlpGrpcExporter, OtlpHttpExporter (see full schema docs here) (#8446)
  • OTLP: Reduce failure logs to FINE after shutdown (#8819)
  • OTLP: retry gRPC based on response status codes in trailer headers (#8854)
  • Prometheus: Avoid regex backtracking when removing unit annotations (#8910)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-bom's changelog.

Version 1.67.0 (2026-10-09)

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Fix GHSA-ccrj-gw8r-854m: Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

... (truncated)

Commits
  • b4b3a1b [release/v1.67.x] Prepare release 1.67.0 (#8924)
  • 66ff8f3 Prepare for 1.67.0 release (#8918)
  • 49dd9f3 fix: retry OTLP gRPC responses with trailer status (#8854)
  • 6e4eb27 Add experimental SDK entity support and OTLP export (#8464)
  • 0d0b0ca Avoid shared internal ConfigUtil (#6970) (#8855)
  • 766eb4d Match array attributes element-wise in declarative config rule_based sampler ...
  • aa88015 Update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2.4.21 (#8776)
  • f235b4d Update all patch and minor versions (#8908)
  • c99cb41 Add type introspection to DeclarativeConfigProperties (#8883)
  • cc4f5f2 Avoid regex backtracking when parsing tracestate (#8914)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

ok2c and others added 5 commits October 31, 2026 14:53
…be executed manually during release preparation due to those tests failing intermittently in CI
Since the default verifier fallback was removed, CLIENT or BOTH policy
with a null HostnameVerifier performed no hostname verification at all.
ConscryptClientTlsStrategy and the deprecated DefaultClientTlsStrategy
constructor now select the BUILTIN policy when no verifier is given, and
AbstractClientTlsStrategy rejects CLIENT or BOTH without a verifier.
Once the CONNECT tunnel is established a 407 comes from the origin. It
was evaluated against the proxy auth exchange, which failed with a
NullPointerException or IllegalStateException. The response is now
returned to the caller as is.
The target name was passed as the endpoint name when connecting to the
first hop, so the proxy certificate was verified against, and the SNI
set to, the target virtual host instead of the proxy. The target name is
now used only when upgrading to TLS for the target.
Bumps the all group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [org.conscrypt:conscrypt-openjdk-uber](https://github.com/google/conscrypt) | `2.7.0` | `2.8.0` |
| [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) | `1.5.7-22` | `1.5.7-25` |
| [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) | `1.17.1` | `1.17.2` |
| [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer) | `1.17.1` | `1.17.2` |
| [io.micrometer:micrometer-registry-prometheus](https://github.com/micrometer-metrics/micrometer) | `1.17.1` | `1.17.2` |
| [io.micrometer:micrometer-tracing](https://github.com/micrometer-metrics/tracing) | `1.7.1` | `1.7.2` |
| [io.micrometer:micrometer-tracing-bridge-otel](https://github.com/micrometer-metrics/tracing) | `1.7.1` | `1.7.2` |
| [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0` | `1.67.0` |


Updates `org.conscrypt:conscrypt-openjdk-uber` from 2.7.0 to 2.8.0
- [Release notes](https://github.com/google/conscrypt/releases)
- [Commits](google/conscrypt@2.7.0...2.8.0)

Updates `com.github.luben:zstd-jni` from 1.5.7-22 to 1.5.7-25
- [Commits](https://github.com/luben/zstd-jni/commits)

Updates `io.micrometer:micrometer-core` from 1.17.1 to 1.17.2
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.17.1...v1.17.2)

Updates `io.micrometer:micrometer-observation` from 1.17.1 to 1.17.2
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.17.1...v1.17.2)

Updates `io.micrometer:micrometer-registry-prometheus` from 1.17.1 to 1.17.2
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.17.1...v1.17.2)

Updates `io.micrometer:micrometer-observation` from 1.17.1 to 1.17.2
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.17.1...v1.17.2)

Updates `io.micrometer:micrometer-registry-prometheus` from 1.17.1 to 1.17.2
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.17.1...v1.17.2)

Updates `io.micrometer:micrometer-tracing` from 1.7.1 to 1.7.2
- [Release notes](https://github.com/micrometer-metrics/tracing/releases)
- [Commits](micrometer-metrics/tracing@v1.7.1...v1.7.2)

Updates `io.micrometer:micrometer-tracing-bridge-otel` from 1.7.1 to 1.7.2
- [Release notes](https://github.com/micrometer-metrics/tracing/releases)
- [Commits](micrometer-metrics/tracing@v1.7.1...v1.7.2)

Updates `io.micrometer:micrometer-tracing-bridge-otel` from 1.7.1 to 1.7.2
- [Release notes](https://github.com/micrometer-metrics/tracing/releases)
- [Commits](micrometer-metrics/tracing@v1.7.1...v1.7.2)

Updates `io.opentelemetry:opentelemetry-bom` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.66.0...v1.67.0)

---
updated-dependencies:
- dependency-name: org.conscrypt:conscrypt-openjdk-uber
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.github.luben:zstd-jni
  dependency-version: 1.5.7-25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-core
  dependency-version: 1.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-observation
  dependency-version: 1.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-registry-prometheus
  dependency-version: 1.17.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-observation
  dependency-version: 1.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-registry-prometheus
  dependency-version: 1.17.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-tracing
  dependency-version: 1.7.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-tracing-bridge-otel
  dependency-version: 1.7.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-tracing-bridge-otel
  dependency-version: 1.7.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.opentelemetry:opentelemetry-bom
  dependency-version: 1.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants