Skip to content

[CORE-69]: Bump the minor-patch-dependencies group across 1 directory with 12 updates #435

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 18, 2025

Bumps the minor-patch-dependencies group with 11 updates in the / directory:

Package From To
io.opentelemetry:opentelemetry-sdk 1.49.0 1.51.0
io.projectreactor.netty:reactor-netty-http 1.2.6 1.2.7
com.fasterxml.jackson:jackson-bom 2.19.0 2.19.1
bio.terra:terra-resource-janitor-client 0.113.49-SNAPSHOT 0.113.50-SNAPSHOT
net.javacrumbs.shedlock:shedlock-spring 6.8.0 6.9.0
com.google.cloud:google-cloud-pubsub 1.139.4 1.140.1
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.19.0 2.19.1
io.swagger.core.v3:swagger-annotations 2.2.32 2.2.33
org.webjars.npm:swagger-ui-dist 5.22.0 5.25.2
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.19.0 2.19.1
com.google.auth:google-auth-library-oauth2-http 1.36.0 1.37.0

Updates io.opentelemetry:opentelemetry-sdk from 1.49.0 to 1.51.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk's releases.

Version 1.51.0

API

Context

  • Fix context storage provider property name in log message (#7342)

SDK

  • Experimental configurable exception.* attribute resolution for SdkTracerProvider, SdkLoggerProvider (#7266)

Exporters

  • All exporters: implement new SemConv exporter health metrics, with configuration API for selecting schema version (#7265)
  • OTLP: Add gRPC export for profiles signal type. (#7301)
  • OTLP: Run JDK HTTP sender on non-daemon threads. (#7322)
  • Prometheus: fix serialization of arrays (#7291)
  • OTLP: exporter tolerates instances of LogRecordData when incubator is present (#7393)

Extensions

  • Declarative config: Handle instrumentation node changes in yaml config file format 0.4 (#7357)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​alex-kormukhin @​breedx-splk @​fandreuz @​HaloFour @​jack-berg @​jhalliday @​jkwatson @​JonasKunz @​kevinburkesegment @​LaurentTreguier @​LikeTheSalad @​onurkybsi @​opentelemetrybot @​robsunday @​SoftlySplinter @​trask @​zeitlinger

Version 1.50.0

API

  • Clarify that AttributesBuilder.put allows nulls (#7271)
  • Stabilize log record event name (#7277)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk's changelog.

Version 1.51.0 (2025-06-06)

API

Context

  • Fix context storage provider property name in log message (#7342)

SDK

  • Experimental configurable exception.* attribute resolution for SdkTracerProvider, SdkLoggerProvider (#7266)

Exporters

  • All exporters: implement new SemConv exporter health metrics, with configuration API for selecting schema version (#7265)
  • OTLP: Add gRPC export for profiles signal type. (#7301)
  • OTLP: Run JDK HTTP sender on non-daemon threads. (#7322)
  • Prometheus: fix serialization of arrays (#7291)
  • OTLP: exporter tolerates instances of LogRecordData when incubator is present (#7393)

Extensions

  • Declarative config: Handle instrumentation node changes in yaml config file format 0.4 (#7357)

Version 1.50.0 (2025-05-09)

API

  • Clarify that AttributesBuilder.put allows nulls (#7271)
  • Stabilize log record event name (#7277)

Context

  • Fix duplicated ExecutorService wrap (#7245)
  • Promote getAll to TextMapGetter stable API (#7267)

... (truncated)

Commits
  • c280308 [release/v1.51.x] Prepare release 1.51.0 (#7400)
  • d034464 Prepare for 1.51.0 release (#7396)
  • f2f29f5 fix(deps): update prometheusserverversion to v1.3.8 (#7367)
  • 8ed10f2 OTLP exporter should tolerate instances of LogRecordData when incubator is pr...
  • 5e50aa7 prom exporter: exclude shaded protobuf (#7355)
  • cb92d97 chore(deps): update dependency gradle to v8.14.2 (#7394)
  • 5fada73 fix(deps): update dependency com.squareup.wire:wire-bom to v5.3.3 (#7395)
  • c874197 chore(config): migrate renovate config (#7351)
  • d41c099 chore(deps): update weekly update (#7352)
  • 9e76c90 fix(deps): update dependency io.netty:netty-bom to v4.2.2.final (#7389)
  • Additional commits viewable in compare view

Updates io.projectreactor.netty:reactor-netty-http from 1.2.6 to 1.2.7

Release notes

Sourced from io.projectreactor.netty:reactor-netty-http's releases.

v1.2.7

Reactor Netty 1.2.7 is part of 2024.0.7 Release Train.

What's Changed

✨ New features and improvements

📖 Documentation

  • Document the required HTTP/2 initial setting when websocket over HTTP/2 on the server by @​violetagg in #3783

Full Changelog: reactor/reactor-netty@v1.2.6...v1.2.7

Commits

Updates com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1

Commits
  • 8ff1ae1 [maven-release-plugin] prepare release jackson-bom-2.19.1
  • b5dfc68 Prep for 2.19.1
  • 9a5357b Merge branch '2.18' into 2.19
  • 30e9a6d Revert back to full release set (from micro-patch)
  • e4e8745 [maven-release-plugin] prepare for next development iteration
  • 132e50c [maven-release-plugin] prepare release jackson-bom-2.18.4.1
  • 93c1c27 Prep for 2.18.4.1 micro-patch
  • 01b1441 Update Woodstox dep to 7.1.1
  • 54347db Switch to Central Portal publishing
  • 61589da Merge branch '2.18' into 2.19
  • Additional commits viewable in compare view

Updates bio.terra:terra-resource-janitor-client from 0.113.49-SNAPSHOT to 0.113.50-SNAPSHOT

Updates net.javacrumbs.shedlock:shedlock-spring from 6.8.0 to 6.9.0

Changelog

Sourced from net.javacrumbs.shedlock:shedlock-spring's changelog.

6.9.0 (2025-06-07)

Commits

Updates net.javacrumbs.shedlock:shedlock-provider-jdbc-template from 6.8.0 to 6.9.0

Updates com.google.cloud:google-cloud-pubsub from 1.139.4 to 1.140.1

Release notes

Sourced from com.google.cloud:google-cloud-pubsub's releases.

v1.140.1

1.140.1 (2025-06-05)

Bug Fixes

  • deps: Update the Java code generator (gapic-generator-java) to 2.59.0 (0eece50)

Dependencies

  • Update dependency com.google.cloud:sdk-platform-java-config to v3.49.0 (#2448) (d89a14d)

v1.140.0

1.140.0 (2025-06-03)

Features

  • Add SchemaViolationReason to IngestionFailureEvent (21cc376)

Dependencies

  • Update dependency com.google.cloud:google-cloud-bigquery to v2.50.1 (#2435) (b37c557)
  • Update dependency com.google.cloud:google-cloud-storage to v2.52.3 (#2436) (4f309d1)
  • Update dependency com.google.cloud:sdk-platform-java-config to v3.49.0 (#2444) (a59135c)
  • Update dependency com.google.cloud:sdk-platform-java-config to v3.49.0 (#2446) (6434be1)
  • Update dependency com.google.protobuf:protobuf-java-util to v4.31.0 (#2430) (232fac1)
  • Update googleapis/sdk-platform-java action to v2.59.0 (#2445) (12d4cfb)

Documentation

  • sample: Update the subscribe with error listener and subscribe with exactly-once samples (#2437) (17c142b)
Changelog

Sourced from com.google.cloud:google-cloud-pubsub's changelog.

1.140.1 (2025-06-05)

Bug Fixes

  • deps: Update the Java code generator (gapic-generator-java) to 2.59.0 (0eece50)

Dependencies

  • Update dependency com.google.cloud:sdk-platform-java-config to v3.49.0 (#2448) (d89a14d)

1.140.0 (2025-06-03)

Features

  • Add SchemaViolationReason to IngestionFailureEvent (21cc376)

Dependencies

  • Update dependency com.google.cloud:google-cloud-bigquery to v2.50.1 (#2435) (b37c557)
  • Update dependency com.google.cloud:google-cloud-storage to v2.52.3 (#2436) (4f309d1)
  • Update dependency com.google.cloud:sdk-platform-java-config to v3.49.0 (#2444) (a59135c)
  • Update dependency com.google.cloud:sdk-platform-java-config to v3.49.0 (#2446) (6434be1)
  • Update dependency com.google.protobuf:protobuf-java-util to v4.31.0 (#2430) (232fac1)
  • Update googleapis/sdk-platform-java action to v2.59.0 (#2445) (12d4cfb)

Documentation

  • sample: Update the subscribe with error listener and subscribe with exactly-once samples (#2437) (17c142b)
Commits
  • 5c97d77 chore(main): release 1.140.1 (#2454)
  • 0eece50 chore: Update generation configuration at Thu Jun 5 02:34:31 UTC 2025 (#2451)
  • d89a14d deps: update dependency com.google.cloud:sdk-platform-java-config to v3.49.0 ...
  • 0b53e47 chore(main): release 1.140.1-SNAPSHOT (#2449)
  • bb3d66b chore(main): release 1.140.0 (#2447)
  • 6434be1 deps: update dependency com.google.cloud:sdk-platform-java-config to v3.49.0 ...
  • 1c838b6 chore: Update generation configuration at Tue Jun 3 02:34:37 UTC 2025 (#2441)
  • e8b13d4 chore(main): release 1.139.5-SNAPSHOT (#2433)
  • 12d4cfb deps: update googleapis/sdk-platform-java action to v2.59.0 (#2445)
  • a59135c deps: update dependency com.google.cloud:sdk-platform-java-config to v3.49.0 ...
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-yaml from 2.19.0 to 2.19.1

Commits
  • 58246bf [maven-release-plugin] prepare release jackson-dataformats-text-2.19.1
  • c0ad1a8 Prep for 2.19.1
  • 77ad244 Manual pom.xml merge
  • 247b42b Merge branch '2.18' into 2.19
  • 82bcafa Udpate snapshot access to Central Portal
  • 24afe40 Merge branch '2.18' into 2.19
  • 57188ef Fix CI wrt branch constraints
  • ed0fc71 Merge branch '2.18' into 2.19
  • 300e1f6 Back to snapshot dep
  • cea427d [maven-release-plugin] prepare for next development iteration
  • Additional commits viewable in compare view

Updates io.swagger.core.v3:swagger-annotations from 2.2.32 to 2.2.33

Updates org.webjars.npm:swagger-ui-dist from 5.22.0 to 5.25.2

Release notes

Sourced from org.webjars.npm:swagger-ui-dist's releases.

v5.25.2

5.25.2 (2025-06-18)

Bug Fixes

  • dist: provide correct npm token for swagger-ui-dist release (a9ce4bb)

v5.25.1

5.25.1 (2025-06-18)

Bug Fixes

  • CD: provide correct npm token (973480e)

v5.25.0

5.25.0 (2025-06-18)

Features

  • release SwaggerUI via GitHub Actions (b182b4f)

Swagger UI v5.24.2 Released!

5.24.2 (2025-06-16)

Bug Fixes

  • align expanded content inside expand collapse button (#10497) (2574351)

Swagger UI v5.24.1 Released!

5.24.1 (2025-06-10)

Features

  • oas3: show the schema tab in the Try it Out mode (#10440) (ac106cd)

Swagger UI v5.24.0 Released!

5.24.0 (2025-06-05)

Bug Fixes

  • mitigate ReDoS when generating examples from pattern (#10477) (71c9314)
  • packagist: exclude large obsolete directories from publishing to Packagist (#10329) (cbd4b30)
  • release: fix failed v5.23.0 release (8045f06)

... (truncated)

Commits
  • a114073 chore(release): cut the 5.25.2 release
  • a9ce4bb fix(dist): provide correct npm token for swagger-ui-dist release
  • 1d88d6f chore(release): cut the 5.25.1 release
  • 973480e fix(CD): provide correct npm token
  • 6b86bef chore(release): cut the 5.25.0 release
  • 89e6af9 ci(release-swagger-ui): provide correct npm token
  • b182b4f feat: release SwaggerUI via GitHub Actions
  • 41438a8 ci(release-swagger-ui): disable running test
  • a155280 ci(release-swagger-ui): disable running test
  • 89c942c ci(release-swagger-ui): rename GA workflow
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.19.0 to 2.19.1

Updates com.google.auth:google-auth-library-oauth2-http from 1.36.0 to 1.37.0

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
bio.terra:terra-resource-janitor-client [>= 0.114.a, < 0.115]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… with 12 updates

Bumps the minor-patch-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.opentelemetry:opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-java) | `1.49.0` | `1.51.0` |
| [io.projectreactor.netty:reactor-netty-http](https://github.com/reactor/reactor-netty) | `1.2.6` | `1.2.7` |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.19.0` | `2.19.1` |
| bio.terra:terra-resource-janitor-client | `0.113.49-SNAPSHOT` | `0.113.50-SNAPSHOT` |
| [net.javacrumbs.shedlock:shedlock-spring](https://github.com/lukas-krecan/ShedLock) | `6.8.0` | `6.9.0` |
| [com.google.cloud:google-cloud-pubsub](https://github.com/googleapis/java-pubsub) | `1.139.4` | `1.140.1` |
| [com.fasterxml.jackson.dataformat:jackson-dataformat-yaml](https://github.com/FasterXML/jackson-dataformats-text) | `2.19.0` | `2.19.1` |
| io.swagger.core.v3:swagger-annotations | `2.2.32` | `2.2.33` |
| [org.webjars.npm:swagger-ui-dist](https://github.com/swagger-api/swagger-ui) | `5.22.0` | `5.25.2` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.19.0` | `2.19.1` |
| com.google.auth:google-auth-library-oauth2-http | `1.36.0` | `1.37.0` |



Updates `io.opentelemetry:opentelemetry-sdk` from 1.49.0 to 1.51.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.49.0...v1.51.0)

Updates `io.projectreactor.netty:reactor-netty-http` from 1.2.6 to 1.2.7
- [Release notes](https://github.com/reactor/reactor-netty/releases)
- [Commits](reactor/reactor-netty@v1.2.6...v1.2.7)

Updates `com.fasterxml.jackson:jackson-bom` from 2.19.0 to 2.19.1
- [Commits](FasterXML/jackson-bom@jackson-bom-2.19.0...jackson-bom-2.19.1)

Updates `bio.terra:terra-resource-janitor-client` from 0.113.49-SNAPSHOT to 0.113.50-SNAPSHOT

Updates `net.javacrumbs.shedlock:shedlock-spring` from 6.8.0 to 6.9.0
- [Changelog](https://github.com/lukas-krecan/ShedLock/blob/master/RELEASES.md)
- [Commits](https://github.com/lukas-krecan/ShedLock/commits/shedlock-parent-6.9.0)

Updates `net.javacrumbs.shedlock:shedlock-provider-jdbc-template` from 6.8.0 to 6.9.0

Updates `com.google.cloud:google-cloud-pubsub` from 1.139.4 to 1.140.1
- [Release notes](https://github.com/googleapis/java-pubsub/releases)
- [Changelog](https://github.com/googleapis/java-pubsub/blob/main/CHANGELOG.md)
- [Commits](googleapis/java-pubsub@v1.139.4...v1.140.1)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.19.0 to 2.19.1
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.19.0...jackson-dataformats-text-2.19.1)

Updates `io.swagger.core.v3:swagger-annotations` from 2.2.32 to 2.2.33

Updates `org.webjars.npm:swagger-ui-dist` from 5.22.0 to 5.25.2
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Changelog](https://github.com/swagger-api/swagger-ui/blob/master/.releaserc)
- [Commits](swagger-api/swagger-ui@v5.22.0...v5.25.2)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.19.0 to 2.19.1

Updates `com.google.auth:google-auth-library-oauth2-http` from 1.36.0 to 1.37.0

---
updated-dependencies:
- dependency-name: io.opentelemetry:opentelemetry-sdk
  dependency-version: 1.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: io.projectreactor.netty:reactor-netty-http
  dependency-version: 1.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: bio.terra:terra-resource-janitor-client
  dependency-version: 0.113.50-SNAPSHOT
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: net.javacrumbs.shedlock:shedlock-spring
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: net.javacrumbs.shedlock:shedlock-provider-jdbc-template
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: com.google.cloud:google-cloud-pubsub
  dependency-version: 1.140.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
  dependency-version: 2.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: io.swagger.core.v3:swagger-annotations
  dependency-version: 2.2.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: org.webjars.npm:swagger-ui-dist
  dependency-version: 5.25.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: com.google.auth:google-auth-library-oauth2-http
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested review from a team, davidangb and kevinmarete and removed request for a team June 18, 2025 14:51
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 18, 2025

The reviewers field in the dependabot.yml file will be removed soon. Please use the code owners file to specify reviewers for Dependabot PRs. For more information, see this blog post.

Copy link

Copy link
Collaborator

@davidangb davidangb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is failing integration tests.

@davidangb
Copy link
Collaborator

@dependabot ignore io.opentelemetry:opentelemetry-sdk

Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 18, 2025

OK, I won't notify you about io.opentelemetry:opentelemetry-sdk again, unless you unignore it.

Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 18, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jun 18, 2025
@dependabot dependabot bot deleted the dependabot/gradle/master/minor-patch-dependencies-e16761479a branch June 18, 2025 20:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants