Skip to content

Update all non-major maven dependencies #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update all non-major maven dependencies #3

renovate wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 16, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
com.github.ben-manes.caffeine:caffeine 3.1.8 → 3.2.3 age confidence
org.springframework.boot:spring-boot-dependencies (source) 3.5.4 → 3.5.10 age confidence
io.opentelemetry.instrumentation:opentelemetry-spring-boot-starter 2.15.0 → 2.24.0 age confidence

Release Notes

ben-manes/caffeine (com.github.ben-manes.caffeine:caffeine)

v3.2.3: 3.2.3

  • Fixed frequency tracking of weak keys to use the object's identity hash code (#​1902)
  • Added support for underscores in CaffeineSpec when using numeric literals (#​1890)
  • Improved the external api to no longer lock when querying for the maximum size or weighted size (#​1897)
  • Added detection and recovery when a custom CompletableFuture is in an inconsistent state (quarkus#50513)

v3.2.2: 3.2.2

  • Fixed characteristics returned by Spliterators (#​1883)

v3.2.1: 3.2.1

  • Fixed computeIfAbsent for an async cache's synchronous view to retry if incomplete
  • Improved CaffeineSpec when being reflectively constructed (#​1839)
  • Improved the handling of negative durations with variable expiration
  • Fixed intermittent null after replacing a weak/soft value (#​1820)

v3.2.0: 3.2.0

Cache

  • Added Sigstore signing of maven artifacts
  • Added Expiry static factory methods (#​1499)
  • Migrated to JSpecify annotations (was checker framework)
  • Fixed variable expiration calculation when nearing overflow
  • Added logging when an async cache's removal listener fails
  • Added an expiration write optimization to more operations (#​1320)
  • Fixed when a Weigher or Expiry fail on an async completion (#​1687)
  • Fixed cases when the expiration ticker was also used for statistics (#​1678)
  • Fixed refresh handling to skip if the async cache's entry is still loading (#​1478)
  • Fixed containsKey for an async cache's synchronous view while in-flight (#​1626)
  • Fixed premature expiration for an async cache when using nearly immediate expiration (#​1623)
  • For a bulk async load returning extra mappings, wait to be added to the cache before returning (#​1409)

Guava

  • Relaxed the OSGi version requirement (#​1160)

JCache

  • Allow hibernate.javax.cache.uri to load the configuration from a jar (#​1347)
spring-projects/spring-boot (org.springframework.boot:spring-boot-dependencies)

v3.5.10

v3.5.9

Compare Source

v3.5.8

⚠️ Noteworthy changes
🐞 Bug Fixes
  • Gradle war task does not exclude starter POMs from lib-provided #​48196
  • Testcontainers integration fails on Docker 29.0.0 #​48192
  • SslMeterBinder doesn't register metrics for dynamically added bundles if no bundles exist at bind time #​48180
  • Properties bound in the child management context ignore the parent's environment prefix #​48176
  • ssl.chain.expiry metrics doesn't update for dynamically registered SSL bundles #​48153
  • Auto-configuration exclusions are checked using a different class loader to the one that loads auto-configuration classes #​48129
  • New arm64 macbooks fail to bootBuildImage due to incorrect platform image #​48127
  • NullPointerException when using @ConditionalOnSingleCandidate with multiple manually registered singletons #​48123
  • Buildpack fails with recent Docker installs due to hardcoded version in URL #​48102
  • Image building may fail when specifying a platform if an image has already been built with a different platform #​48098
  • Undertow's ServletContext is destroy too early, making it unusable in @PreDestroy methods #​48061
  • PortInUseException incorrectly thrown on failure to bind port due to Netty IP misconfiguration #​48058
  • Auto-configured JCacheMetrics cannot be customized #​48056
  • WebSecurityCustomizer beans are excluded by WebMvcTest #​48054
  • Devtools Restarter does not work with a parameterless main method #​47987
  • Setting 'max-uri-tags' does not prevent unlimited meter growth on any AutoConfiguredCompositeMeterRegistry #​47923
  • Docker response 407 is not handled correctly resulting in no error message #​47900
  • spring-boot-maven-plugin process-aot goal does not find package-private main method #​47780
📔 Documentation
  • Revise AWS section of "Deploying to the Cloud" in reference manual #​48156
  • Fix typo in PortInUseException Javadoc #​48133
  • Correct section about required setters in "Type-safe Configuration Properties" #​48130
  • Document EndpointObjectMapper and management.endpoints.jackson.isolated-object-mapper #​48114
  • Document support for configuring servlet context init parameters using properties #​48111
  • Clarify how warnings about soon-to-expire SSL certificates are reported #​48062
  • Document how to use ContextPropagatingTaskDecorator for propagating trace context over thread boundaries #​48052
  • Use since attribute in configuration properties deprecation consistently #​47980
  • BootstrapContext#getOrElseThrow has incorrect reference to IllegalStateException #​47905
  • Clarify when BootstrapContext get methods may return null rather than throwing an exception or calling the fallback supplier #​47898
  • Document that Actuator endpoint may have at most one extension of each type #​47873
  • Limit Kotlin API documentation to Kotlin-specific APIs #​47859
  • Adapt AOTCache documentation to JEP 514 #​47274
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​K-jun98, @​TerryTaoYY, @​hojooo, @​linw-bai, @​mipo256, @​namest504, @​ngocnhan-tran1996, @​nosan, @​scottfrederick, @​siva-sai-udaygiri, @​tschut, and @​vpavic

v3.5.7

Compare Source

⭐ New Features
  • Add TWENTY_FIVE to JavaVersion enum #​47609
🐞 Bug Fixes
  • Signed jar verification fails when nested in an uber war running on an Oracle JVM #​47771
  • In an uber war, value of the Sbom-Location manifest attribute does not match the SBOM's actual location #​47737
  • Homebrew formula for the CLI should use libexec #​47722
  • When virtual threads are enabled, embedded Jetty does not use recommended virtual thread configuration #​47717
  • ClientHttpRequestFactoryRuntimeHints is missing timeout methods with Duration overloads #​47678
  • OnBeanCondition no longer correctly finds annotations on scoped target proxy beans #​47635
  • JavaVersion doesn't work reliably in native-image #​47620
  • LiquibaseEndpoint always uses defaultSchema instead of liquibaseSchema #​47346
  • Launcher fails to find main method when it is parameterless #​47311
  • Package private Main class using Java 25 is not found by build plugins #​47309
  • Bitnami legacy images are not automatically detected #​47275
  • Maven plugin does not provide an easy way to exclude optional dependencies from uber jar #​25403
📔 Documentation
  • Some spring.test.* properties are not documented #​47775
  • Dependency management for Maven AntRun Plugin is missing changelog link #​47744
  • Developing Your First Spring Boot Application has outdated tools #​47700
  • Include deprecated configuration properties in the reference documentation #​47669
  • Aggregated Javadoc should link to the proper version of JakartaEE #​47593
  • Update javadoc of TestRestTemplate following change to redirect behavior #​47474
  • Use non-deprecated syntax to configure sourceCompatibility #​47343
  • Fix link to Framework's @Bean annotation #​47330
  • Update managed dependency version override examples in documentation #​47306
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​DKARAGODIN, @​JinhyeokFang, @​Lublanski, @​Pankraz76, @​fhiyo, @​ngocnhan-tran1996, @​nosan, @​scottfrederick, and @​xyraclius

v3.5.6

Compare Source

🐞 Bug Fixes
  • Quoted -D arguments break system property resolution on Linux with Spring AOT #​47166
  • Groovy Templates fails with an NPE when rendering an auto new line #​47139
  • available() does not behave correctly when reading stored entries from a NestedJarFile #​47057
  • spring-boot-docker-compose doesn't create service connections when image has registry host but not project #​47019
  • Flyway Ignore Migration Patterns setting can't be set to an empty string #​47013
📔 Documentation
  • Default value of server.tomcat.resource.cache-ttl is not documented #​47253
  • Document Java 25 support #​47245
  • Fix links to Flyway reference documentation #​46988
  • Clarify Javadoc of Customizer interfaces about overriding behavior #​46942
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Chanwon-Seo, @​doljae, @​izeye, and @​quaff

v3.5.5

Compare Source

🐞 Bug Fixes
  • Hazelcast health indicator reports the wrong status when Hazelcast has shut down due to an out-of-memory error #​46909
  • Performance critical tracing code has high overhead due to the use of the Stream API #​46844
  • SpringLiquibaseCustomizer is exposed outside its defined visibility scope #​46758
  • Race condition in OutputCapture can result in stale data #​46721
  • Auto-configured WebClient no longer uses context's ReactorResourceFactory #​46673
  • Default value not detected for a field annoted with @Name #​46666
  • Missing metadata when using @Name with a constructor-bound property #​46663
  • Missing property for Spring Authorization Server's PAR endpoint #​46641
  • Property name is incorrect when reporting a mis-configured OAuth 2 Resource Server JWT public key location #​46636
  • Memory not freed on context restart in JpaMetamodel#CACHE with spring.main.lazy-initialization=true #​46634
  • Auto-configured MockMvc ignores @FilterRegistration annotation #​46605
  • Failure to discover default value for a primitive should not lead to document its default value #​46561
📔 Documentation
  • Kotlin samples for configuration metadata are in the wrong package #​46857
  • Observability examples in the reference guide are missing the Kotlin version #​46798
  • Align method descriptions for SslOptions getCiphers and getEnabledProtocols with @returns #​46769
  • Tracing samples in the reference guide are missing the Kotlin version #​46767
  • Improve Virtual Threads section to mention the changes in Java 24 #​46610
  • spring.test.webtestclient.timeout is not documented #​46588
  • spring-boot-test-autoconfigure should use the configuration properties annotation processor like other modules #​46585
  • Adapt deprecation level for management.health.influxdb.enabled #​46580
  • spring.test.mockmvc properties are not documented #​46578
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Kguswo, @​deejay1, @​ganjisriver, @​izeye, @​jetflo, @​ngocnhan-tran1996, @​nicolasgarea, @​nosan, @​prishedko, @​quaff, @​schmidti159, @​scordio, @​shakuzen, @​tommyk-gears, @​zahra7, and @​zakaria-shahen

open-telemetry/opentelemetry-java-instrumentation (io.opentelemetry.instrumentation:opentelemetry-spring-boot-starter)

v2.24.0

Compare Source

⚠️ Breaking Changes
  • Remove support for previously deprecated property
    otel.instrumentation.logback-appender.experimental.capture-logstash-attributes
    (#​15722)
  • Remove deprecated methods from HTTP library instrumentations
    (#​15802)
🚫 Deprecations
  • JMX Metrics: Deprecated addClassPathRules and addCustomRules methods in
    JmxTelemetryBuilder, and moved non-public classes to an internal package
    (#​15658)
  • Deprecated setMessagingReceiveInstrumentationEnabled in favor of
    setMessagingReceiveTelemetryEnabled to match config property name
    (#​15668)
  • Deprecated database client attribute getter methods getDbSystem() and getResponseStatus()
    in favor of getDbSystemName() and getResponseStatusCode() to align with stable semantic
    conventions
    (#​15696)
  • Deprecated setCapturedRequestParameters() in Servlet library instrumentation in favor of
    Experimental.setCapturedRequestParameters() as request parameter capture is experimental
    (#​15826)
  • Deprecated getHttpClient(), setHttpClientTransport(), and setSslContextFactory() in Jetty
    client instrumentation in favor of new builder-style methods newHttpClient(),
    newHttpClient(SslContextFactory), and newHttpClient(HttpClientTransport, SslContextFactory)
    (#​15827)
  • Deprecate Netty experimental method that is still in public API
    (#​15828)
  • Deprecated newHttpClient() in favor of wrap() in Java HTTP Client instrumentation for
    consistency with naming conventions across library instrumentations
    (#​15829)
  • Deprecated new* methods in favor of create* methods across multiple instrumentation libraries
    for consistency (e.g., newHttpClient() → createHttpClient(), newInterceptor() →
    createInterceptor())
    (#​15832)
  • Deprecated methods in SqlStatementInfo and MultiQuery in favor of methods using stable
    semantic convention terminology: getFullStatement() → getQueryText(), getOperation() →
    getOperationName(), and getStatements() → getQueryTexts()
    (#​15833)
  • Deprecated database getter methods in favor of methods using stable semantic convention
    terminology: getResponseStatusCode() → getDbResponseStatusCode(), getBatchSize() →
    getDbOperationBatchSize(), and getQueryParameters() → getDbQueryParameters()
    (#​15859)
📈 Enhancements
🛠️ Bug fixes
  • Servlet library instrumentation: fix capturing enduser.id
    (#​15858)
  • Fix agent startup failing on read-only filesystem
    (#​15682)

v2.23.0

Compare Source

⚠️ Breaking Changes
  • ActiveMQ Classic JMX metrics: rename attributes and metrics to align
    with semantic conventions (see PR description for specifics)
    (#​14996)
  • Library instrumentation: remove previously deprecated methods from telemetry builders
    (#​15324)
  • Logback: captureArguments no longer captures message template, use captureTemplate
    (#​15423)
  • Play: disable controller spans by default,
    re-enable with otel.instrumentation.common.experimental.controller-telemetry.enabled=true
    (#​15604)
🚫 Deprecations
  • Library instrumentation: deprecate setSpanNameExtractor() and setStatusExtractor()
    in favor of setSpanNameExtractorCustomizer() and setStatusExtractorCustomizer()
    (#​15529)
🌟 New javaagent instrumentation
🌟 New library instrumentation
📈 Enhancements
  • Spring starter: add declarative config logging exporter
    (#​14917)
  • Failsafe: add support for RetryPolicy
    (#​15255,
    #​15537)
  • GraphQL: add option to disable capturing query documents
    (#​15384)
  • JMX metrics: allow any classpath resource path in rules
    (#​15413)
  • Spring Boot actuator autoconfigure: support Spring Boot 4
    (#​15433)
  • Spring JMS: support Spring Boot 4
    (#​15434)
  • Spring starter: support Spring Boot 4
    (#​15459)
  • Lettuce: support custom ClientResources
    (#​15470)
  • Lettuce: add reactor-core compatibility checker
    (#​15472)
  • Servlet: propagate context explicitly for async runnables
    (#​15476)
  • Servlet: always add trace_id and span_id attributes to requests
    (#​15485)
  • Pekko HTTP: separate route instrumentation from HTTP server instrumentation
    (#​15499)
  • MongoDB: emit versioned scope name
    (#​15500)
  • Spring WebFlux: support Spring Boot 4
    (#​15502,
    #​15574)
  • Spring WebMVC: support Spring Boot 4
    (#​15525)
  • Spring Cloud Gateway: support Spring Boot 4
    (#​15540)
  • Spring starter: add missing Kafka configuration options
    (#​15592)
  • OpenTelemetry API interop: support new GlobalOpenTelemetry methods introduced in 1.57
    (#​15620)
🛠️ Bug fixes
  • Spring Web/WebFlux: restore GraalVM native-image compatibility
    (#​15306)
  • Spring Kafka: end span in afterRecord callback
    (#​15367)
  • Spring starter: fix environment variable overrides for array properties in declarative config
    (#​15424)
  • Ktor: prevent double end() calls in KtorServerTelemetry
    (#​15452)
  • OpenTelemetry API interop: fix null handling in ExtendedOpenTelemetry declarative config
    (#​15478)
  • Akka HTTP: fix http.route attribute capture and span naming
    (#​15504)
  • Extensions: fix SPI loading for InstrumenterCustomizerProvider and related classes
    (#​15538)
  • Sanitize sql statements that may contain unquoted passwords
    (#​15607)

v2.22.0

Compare Source

⚠️ Breaking Changes
  • AWS SDK 2.x attributes updated to align with semantic conventions
    (#​15028)
    • The following attributes have been renamed:
      • aws.bucket.name (S3) → aws.s3.bucket
      • aws.queue.url (SQS) → aws.sqs.queue.url
      • aws.stream.name (Kinesis) → aws.kinesis.stream_name
      • aws.table.name (DynamoDB) → aws.dynamodb.table_names
      • aws.dynamodb.provisioned_throughput.read_capacity_units → aws.dynamodb.provisioned_read_capacity (type changed from long to double)
      • aws.dynamodb.provisioned_throughput.write_capacity_units → aws.dynamodb.provisioned_write_capacity (type changed from long to double)
      • aws.dynamodb.exclusive_start_table_name → aws.dynamodb.exclusive_start_table
      • aws.dynamodb.projection_expression → aws.dynamodb.projection
      • aws.dynamodb.scan_index_forward → aws.dynamodb.scan_forward
    • The following attribute types have changed:
      • aws.dynamodb.table_names: string → string[]
      • aws.dynamodb.consumed_capacity: string → string[]
      • aws.dynamodb.global_secondary_indexes: string → string[]
      • aws.dynamodb.local_secondary_indexes: string → string[]
      • aws.dynamodb.consistent_read: string → boolean
      • aws.dynamodb.table_count: string → long
      • aws.dynamodb.limit: string → long
      • aws.dynamodb.attributes_to_get: string → string[]
      • aws.dynamodb.segment: string → long
      • aws.dynamodb.total_segments: string → long
      • aws.dynamodb.count: string → long
      • aws.dynamodb.scanned_count: string → long
    • The following attributes are no longer emitted by default but can be enabled with
      otel.instrumentation.aws-sdk.experimental-span-attributes=true:
      • aws.queue.name (SQS)
      • aws.lambda.function.name (Lambda)
      • aws.lambda.function.arn (Lambda)
  • JDBC library data source instrumentation now disabled by default
    ([#​15074](https://redirect.github.com/open-telemetry/opentelemetry-java-i

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner October 16, 2025 10:21
@renovate renovate bot force-pushed the renovate/all-maven-minor-patch branch 4 times, most recently from 693d053 to f7b92ab Compare October 21, 2025 00:05
@renovate renovate bot force-pushed the renovate/all-maven-minor-patch branch 2 times, most recently from 5922dd3 to a7732ba Compare November 1, 2025 11:51
@renovate renovate bot force-pushed the renovate/all-maven-minor-patch branch 2 times, most recently from 12551ca to 86dfa34 Compare November 21, 2025 04:14
@renovate renovate bot force-pushed the renovate/all-maven-minor-patch branch 2 times, most recently from 62b55ac to c97866c Compare December 19, 2025 23:55
@renovate renovate bot force-pushed the renovate/all-maven-minor-patch branch from c97866c to 2a0219d Compare January 17, 2026 04:15
@renovate renovate bot force-pushed the renovate/all-maven-minor-patch branch from 2a0219d to 6330ae1 Compare January 23, 2026 23:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant