Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 2, 2024

Bumps org.springframework.boot:spring-boot-dependencies from 2.7.16 to 3.4.0.

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v3.4.0

⭐ New Features

  • Add withDefaultRequestConfigCustomizer method to HttpComponentsClientHttpRequestFactoryBuilder #43139
  • Fail JsonWriter if duplicate names are detected #43041
  • Add JsonObjectDeserializer.nullSafeValue method that accepts a mapper Function #42972
  • Support timeout property for GraphQL over SSE #42966
  • Improve performance of ConfigurationPropertiesBinder by storing bind handlers on first access #42950
  • Improve performance of ConcurrentReferenceCachingMetadataReaderFactory #42949
  • Log warning in HikariCheckpointRestoreLifecycle if pool suspension isn't configured #42937
  • Remove spring-boot-starter-aop dependency from spring-boot-starter-data-jpa and spring-boot-starter-integration #42934

🐞 Bug Fixes

  • Jersey body handling is inconsistent with Spring Webflux and Spring MVC #43209
  • Classes are accidentally named "structure logging" instead of "structured logging" #43203
  • StructuredLoggingJsonProperties customizer should be a Class reference rather than a String #43202
  • Cannot package OCI image when 'docker.io/paketobuildpacks/new-relic' is provided as a buildpack #43171
  • Incorrect Type for 'management.endpoints.access.default' defined in additional-spring-configuration-metadata.json #43154
  • WebServerPortFileWriter fails when using a portfile without extension #43117
  • SslOptions.isSpecified() only returns true if ciphers and enabled protocols are set #43084
  • SslHealthIndicator throws NullPointerException when using SslBundle with SslStoreBundle.NONE #43078
  • JdkClientHttpRequestFactoryBuilder and JettyClientHttpRequestFactoryBuilder do not set Ciphers or Enabled Protocols #43077
  • Root cause of errors is hidden when loading images from archive #43070
  • mvn spring-boot:run fails on Windows with "Could Not Find or Load Main Class" when path contains non-ASCII characters #43062
  • A @SpyBean on the output of a FactoryBean is not reset #43053
  • Logback logging system does not process URLs with paths not ending in .xml #42990
  • Bean-based conditions do not consider factory beans correctly when determining if they are a candidate #42970
  • NPE in bootBuildImage when setting DOCKER_CONTEXT=default #42960
  • Warning due to duplicate MockResolver extensions #42957
  • HttpHostConnectException is thrown when using buildpacks with Gradle or Maven on Windows #42952
  • build-info doesn't support seconds since the epoch from project.build.outputTimestamp #42936
  • NPE in OnClassCondition.resolveOutcomesThreaded following thread interruption because firstHalf is null #42926
  • Default WebSocketMessageBrokerConfigurer is always overriding custom channel executor #42924
  • X-Registry-Auth header sent to Docker Engine API contains field "authHeader" #42915
  • ApplicationContextRunner has inconsistent behaviour with duplicate auto-configuration class names #17963

📔 Documentation

  • Migrate class references to full javadoc links #43239
  • Documentation for 'spring.datasource.type' is misleading #43199
  • Update "Upgrading From" section to use "2.x" #43160
  • Include spring-boot-loader in API documentation #43153
  • Document how and where to add custom GraalVM configuration files #43074
  • Rework DataSource configuration examples to separate defining an additional DataSource and defining a DataSource of a different type #43059
  • Location of the layers schema is incorrect in the Maven Plugin's examples #43033
  • Link to Eclipse setup instructions #42954
  • Fix link to Checkpoint and Restore status page #42939

🔨 Dependency Upgrades

... (truncated)

Commits
  • 8964203 Release v3.4.0
  • 109e731 Revert "Add @ConditionalOnMissingBean for JobRepository"
  • d21952d Merge branch '3.3.x'
  • 4151938 Next development version (v3.3.7-SNAPSHOT)
  • 14989a5 Upgrade to Testcontainers 1.20.4
  • c188822 Upgrade to Spring Security 6.4.1
  • e286739 Upgrade to Spring Batch 5.2.0
  • 73fc351 Add @ConditionalOnMissingBean for JobRepository
  • 3cae5c2 Merge branch '3.3.x'
  • 283bc6f Merge branch '3.2.x' into 3.3.x
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) from 2.7.16 to 3.4.0.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.16...v3.4.0)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 2, 2024
@dependabot dependabot bot requested a review from a team December 2, 2024 18:12
SylvainJuge
SylvainJuge previously approved these changes Dec 3, 2024
@jackshirazi
Copy link
Contributor

@dependabot rebase

Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 3, 2024

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@@ -430,7 +431,12 @@ private static ConstantCallSite internalBootstrap(MethodHandles.Lookup lookup, S
// avoid re-entrancy and stack overflow errors
// may happen when bootstrapping an instrumentation that also gets triggered during the bootstrap
// for example, adding correlation ids to the thread context when executing logger.debug.
logger().warn("Nested instrumented invokedynamic instruction linkage detected", new Throwable());
if (!loggingForNestedCall.isNestedCallAndIncrement()) {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This caused the tests to timeout due to not making progress. This only happens due to our test instrumentation where instrument java.lang.System to return custom environment variable values.


} else if (exchangeRequest instanceof ServerHttpRequestDecorator) {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like this was a case we simply missed before. Starting with spring 3.4.0 the requests seem to be wrapped by some firewall by default.

@@ -202,7 +202,7 @@ private Predicate<Throwable> expectClientError(int expectedStatus) {
}

@ParameterizedTest
@CsvSource({"GET", "POST", "PUT", "DELETE", "PATCH", "HEAD", "OPTIONS", "TRACE"})
@CsvSource({"GET", "POST", "PUT", "DELETE", "PATCH", "HEAD", "OPTIONS"})
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like in spring 3.4.0 the TRACE method is now rejected by default with 400 BAD_REQUEST. TBH I've so far never seen the TRACE method used in the wild, so imo it is okay to simply remove it from the tests.

@JonasKunz JonasKunz merged commit 52825e7 into main Dec 11, 2024
13 checks passed
@JonasKunz JonasKunz deleted the dependabot/maven/org.springframework.boot-spring-boot-dependencies-3.4.0 branch December 11, 2024 10:25
jackshirazi added a commit that referenced this pull request Feb 27, 2025
* post release: elastic-apm-agent v1.52.1 (#3875)

Co-authored-by: obltmachine <[email protected]>

* build: bump com.networknt:json-schema-validator from 1.5.2 to 1.5.3 (#3879)

Bumps [com.networknt:json-schema-validator](https://github.com/networknt/json-schema-validator) from 1.5.2 to 1.5.3.
- [Release notes](https://github.com/networknt/json-schema-validator/releases)
- [Changelog](https://github.com/networknt/json-schema-validator/blob/master/CHANGELOG.md)
- [Commits](networknt/json-schema-validator@1.5.2...1.5.3)

---
updated-dependencies:
- dependency-name: com.networknt:json-schema-validator
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci: configure gh cli for the major update release step (#3876)

* Prevent NPE when using otel metrics bridge asynchronously to agent start (#3880)

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 973e72c (#3871)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump version.testcontainers from 1.20.1 to 1.20.3 (#3868)

Bumps `version.testcontainers` from 1.20.1 to 1.20.3.

Updates `org.testcontainers:testcontainers-bom` from 1.20.1 to 1.20.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.1...1.20.3)

Updates `org.testcontainers:testcontainers` from 1.20.1 to 1.20.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.1...1.20.3)

---
updated-dependencies:
- dependency-name: org.testcontainers:testcontainers-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.testcontainers:testcontainers
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* [DOCS] Clarify the frequency of config polling (#3799) (#3881)

---------

Co-authored-by: Luca Belluccini <[email protected]>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 55b297d (#3882)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump actions/attest-build-provenance from 1.4.3 to 1.4.4 in the github-actions group (#3866)

Bumps the github-actions group with 1 update: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).
Updates `actions/attest-build-provenance` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@1c608d1...ef24412)

* deps(updatecli): bump all policies (#3886)

* chore: deps(updatecli/policy): bump "ghcr.io/elastic/oblt-updatecli-p...

... olicies/apm/apm-data-spec" Updatecli version policy

Made with ❤️️ by updatecli

* chore: deps(updatecli/policy): bump "ghcr.io/elastic/oblt-updatecli-p...

... olicies/apm/apm-gherkin" Updatecli version policy

Made with ❤️️ by updatecli

* chore: deps(updatecli/policy): bump "ghcr.io/elastic/oblt-updatecli-p...

... olicies/apm/apm-json-specs" Updatecli version policy

Made with ❤️️ by updatecli

---------

Co-authored-by: elastic-observability-automation[bot] <180520183+elastic-observability-automation[bot]@users.noreply.github.com>

* build: bump version.log4j from 2.12.4 to 2.24.2 (#3885)

* build: bump version.log4j from 2.12.4 to 2.24.2

Bumps `version.log4j` from 2.12.4 to 2.24.2.

Updates `org.apache.logging.log4j:log4j-core` from 2.12.4 to 2.24.2

Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.12.4 to 2.24.2

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* revert

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: jackshirazi <[email protected]>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 32f06b1 (#3887)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* Revert "deps(updatecli): bump all policies" (#3888)

This reverts commit b21eeaf.

* github-actions: use v1 for the oblt-actions (#3890)

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to ad2e15a (#3893)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* Set context CL for reliable weblogic connection (#3870)

* set context CL for weblogic

* deps(updatecli): bump all policies (#3894)

* build: bump io.micrometer:micrometer-core from 1.13.6 to 1.14.1 (#3899)

Bumps [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) from 1.13.6 to 1.14.1.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.13.6...v1.14.1)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump version.aws.sdk from 2.29.5 to 2.29.23 in /apm-agent-plugins (#3896)

Bumps `version.aws.sdk` from 2.29.5 to 2.29.23.

Updates `software.amazon.awssdk:s3` from 2.29.5 to 2.29.23

Updates `software.amazon.awssdk:sqs` from 2.29.5 to 2.29.23

Updates `software.amazon.awssdk:dynamodb` from 2.29.5 to 2.29.23

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:s3
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:sqs
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:dynamodb
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci: use tool-versions file (#3901)

* ci: remove elastic-observability-automation from the triage (#3897)

* build: bump org.apache.logging.log4j:log4j-bom from 2.24.1 to 2.24.2 (#3909)

Bumps [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2) from 2.24.1 to 2.24.2.
- [Release notes](https://github.com/apache/logging-log4j2/releases)
- [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc)
- [Commits](apache/logging-log4j2@rel/2.24.1...rel/2.24.2)

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump actions/attest-build-provenance in the github-actions group (#3907)

Bumps the github-actions group with 1 update: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).


Updates `actions/attest-build-provenance` from 1.4.4 to 2.0.1
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@ef24412...c4fbc64)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump version.aws.sdk in /apm-agent-plugins (#3895)

Bumps `version.aws.sdk` from 1.12.777 to 1.12.779.

Updates `com.amazonaws:aws-java-sdk-s3` from 1.12.777 to 1.12.779
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.12.777...1.12.779)

Updates `com.amazonaws:aws-java-sdk-dynamodb` from 1.12.777 to 1.12.779
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.12.777...1.12.779)

Updates `com.amazonaws:aws-java-sdk-sqs` from 1.12.777 to 1.12.779
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.12.777...1.12.779)

---
updated-dependencies:
- dependency-name: com.amazonaws:aws-java-sdk-s3
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.amazonaws:aws-java-sdk-dynamodb
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.amazonaws:aws-java-sdk-sqs
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump org.springframework.boot:spring-boot-dependencies from 2.7.16 to 3.4.0 (#3898)

* build: bump org.springframework.boot:spring-boot-dependencies

Bumps [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) from 2.7.16 to 3.4.0.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.16...v3.4.0)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* Update pom.xml

* Update pom.xml

* Update pom.xml

* Add explicit okhttp dependency version

* Prevent recursion when logging recursive advice bootstrapping

* Support unwrapping webflux requests

* Remove tests for TRACE option as it seems to be blocked by spring

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: jackshirazi <[email protected]>
Co-authored-by: Jonas Kunz <[email protected]>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 1b51ff6 (#3910)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* OS/400 avoids using NOFOLLOW_LINKS (#3905)

* OS/400 avoids using NOFOLLOW_LINKS

* Add changelog entry for os-400-no-follow-links

* build: bump io.micrometer:micrometer-core from 1.14.1 to 1.14.2 (#3915)

Bumps [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) from 1.14.1 to 1.14.2.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.14.1...v1.14.2)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump version.byte-buddy from 1.15.10 to 1.15.11 (#3914)

* build: bump version.byte-buddy from 1.15.10 to 1.15.11

Bumps `version.byte-buddy` from 1.15.10 to 1.15.11.

Updates `net.bytebuddy:byte-buddy` from 1.15.10 to 1.15.11
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.15.10...byte-buddy-1.15.11)

Updates `net.bytebuddy:byte-buddy-agent` from 1.9.16 to 1.15.11
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.9.16...byte-buddy-1.15.11)

Updates `net.bytebuddy:byte-buddy-dep` from 1.15.10 to 1.15.11
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.15.10...byte-buddy-1.15.11)

---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: net.bytebuddy:byte-buddy-dep
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* Update pom.xml

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jonas Kunz <[email protected]>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to bfdeddb (#3916)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump actions/attest-build-provenance in the github-actions group (#3912)

Bumps the github-actions group with 1 update: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).


Updates `actions/attest-build-provenance` from 2.0.1 to 2.1.0
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@c4fbc64...7668571)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 3a6e913 (#3919)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* chore: APM agent json server schema 560cc4b604ede25ec70afd09f213d892f... (#3918)

... 30ceedc

Made with ❤️️ by updatecli

Co-authored-by: elastic-observability-automation[bot] <180520183+elastic-observability-automation[bot]@users.noreply.github.com>

* build: bump org.assertj:assertj-core from 3.26.3 to 3.27.0 (#3922)

Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.26.3 to 3.27.0.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.26.3...assertj-build-3.27.0)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: deps(updatecli): Bump updatecli version to v0.91.0 (#3924)

* build: bump io.opentelemetry.semconv:opentelemetry-semconv (#3925)

Bumps [io.opentelemetry.semconv:opentelemetry-semconv](https://github.com/open-telemetry/semantic-conventions-java) from 1.28.0-alpha to 1.29.0-alpha.
- [Release notes](https://github.com/open-telemetry/semantic-conventions-java/releases)
- [Changelog](https://github.com/open-telemetry/semantic-conventions-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/semantic-conventions-java/commits)

---
updated-dependencies:
- dependency-name: io.opentelemetry.semconv:opentelemetry-semconv
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to eef54b3 (#3927)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump version.aws.sdk in /apm-agent-plugins (#3929)

Bumps `version.aws.sdk` from 2.29.23 to 2.29.43.

Updates `software.amazon.awssdk:s3` from 2.29.23 to 2.29.43

Updates `software.amazon.awssdk:sqs` from 2.29.23 to 2.29.43

Updates `software.amazon.awssdk:dynamodb` from 2.29.23 to 2.29.43

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:s3
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:sqs
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:dynamodb
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump version.log4j from 2.12.4 to 2.24.3 (#3921)

* build: bump version.log4j from 2.12.4 to 2.24.3

Bumps `version.log4j` from 2.12.4 to 2.24.3.

Updates `org.apache.logging.log4j:log4j-core` from 2.12.4 to 2.24.3

Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.12.4 to 2.24.3

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* revert old version

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: jackshirazi <[email protected]>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 2503e99 (#3930)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump version.aws.sdk in /apm-agent-plugins (#3928)

Bumps `version.aws.sdk` from 1.12.779 to 1.12.780.

Updates `com.amazonaws:aws-java-sdk-s3` from 1.12.779 to 1.12.780
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.12.779...1.12.780)

Updates `com.amazonaws:aws-java-sdk-dynamodb` from 1.12.779 to 1.12.780
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.12.779...1.12.780)

Updates `com.amazonaws:aws-java-sdk-sqs` from 1.12.779 to 1.12.780
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.12.779...1.12.780)

---
updated-dependencies:
- dependency-name: com.amazonaws:aws-java-sdk-s3
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.amazonaws:aws-java-sdk-dynamodb
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.amazonaws:aws-java-sdk-sqs
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump version.mockito from 5.14.2 to 5.15.2 (#3934)

Bumps `version.mockito` from 5.14.2 to 5.15.2.

Updates `org.mockito:mockito-core` from 5.14.2 to 5.15.2
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.14.2...v5.15.2)

Updates `org.mockito:mockito-subclass` from 5.14.2 to 5.15.2
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.14.2...v5.15.2)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: org.mockito:mockito-subclass
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add framework info for Spring Webflux (#3936)

* Add framework info for Spring Webflux transactions

* Update changelog

* Fix failing Spring 6 tests

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to f2813ac (#3932)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* chore: deps(updatecli): Bump updatecli version to v0.92.0 (#3937)

Made with ❤️️ by updatecli

Co-authored-by: elastic-observability-automation[bot] <180520183+elastic-observability-automation[bot]@users.noreply.github.com>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to dd66bee (#3941)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* github-actions: ubuntu-20.04 will be fully retired by April 1, 2025 (#3945)

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to ea157dd (#3944)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump org.assertj:assertj-core from 3.27.0 to 3.27.2 (#3938)

* build: bump org.assertj:assertj-core from 3.27.0 to 3.27.2

Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.0 to 3.27.2.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.0...assertj-build-3.27.2)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* fix missing header

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sylvain Juge <[email protected]>

* build: bump org.springframework.boot:spring-boot-dependencies from 2.7.16 to 3.4.1 (#3926)

* Fix inferred spans logging config option docs (#3948)

* remove obsolete tomcat docker image (#3940)

* Investigate incorrect CI failure reporting (#3952)

* build: bump actions/attest-build-provenance in the github-actions group (#3955)

Bumps the github-actions group with 1 update: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).


Updates `actions/attest-build-provenance` from 2.1.0 to 2.2.0
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@7668571...520d128)

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to bd40170 (#3951)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump org.springframework.boot:spring-boot-maven-plugin (#3958)

Bumps [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) from 3.3.0 to 3.4.2.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.3.0...v3.4.2)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add spring boot 3 tests for rabbitMQ / AMQP spring instrumentation (#3961)

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 30fd211 (#3962)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 8df3ca6 (#3963)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump version.aws.sdk in /apm-agent-plugins (#3965)

Bumps `version.aws.sdk` from 2.29.43 to 2.30.11.

Updates `software.amazon.awssdk:s3` from 2.29.43 to 2.30.11

Updates `software.amazon.awssdk:sqs` from 2.29.43 to 2.30.11

Updates `software.amazon.awssdk:dynamodb` from 2.29.43 to 2.30.11

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:s3
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:sqs
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:dynamodb
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: deps(updatecli): Bump updatecli version to v0.93.0 (#3964)

Made with ❤️️ by updatecli

Co-authored-by: elastic-observability-automation[bot] <180520183+elastic-observability-automation[bot]@users.noreply.github.com>

* github-action: Add AsciiDoc freeze warning (#3959)

* fix

* github-action: Add AsciiDoc freeze warning

* github-action: Add AsciiDoc freeze warning

* Update .github/workflows/release-step-3.yml

* build: bump version.byte-buddy from 1.15.11 to 1.17.0 (#3967)

* build: bump version.byte-buddy from 1.15.11 to 1.17.0

Bumps `version.byte-buddy` from 1.15.11 to 1.17.0.

Updates `net.bytebuddy:byte-buddy` from 1.15.11 to 1.17.0
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.15.11...byte-buddy-1.17.0)

Updates `net.bytebuddy:byte-buddy-agent` from 1.9.16 to 1.17.0
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.9.16...byte-buddy-1.17.0)

Updates `net.bytebuddy:byte-buddy-dep` from 1.15.11 to 1.17.0
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.15.11...byte-buddy-1.17.0)

---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: net.bytebuddy:byte-buddy-dep
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* restore old version

* update shade + force asm version

* add new dependency to agent packages

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sylvain Juge <[email protected]>

* fix minor build warnings (#3968)

* remove duplicated dependency

* remove duplicated jar plugin

* build: bump io.micrometer:micrometer-core from 1.14.2 to 1.14.3 (#3971)

Bumps [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) from 1.14.2 to 1.14.3.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.14.2...v1.14.3)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump com.networknt:json-schema-validator from 1.5.3 to 1.5.5 (#3970)

Bumps [com.networknt:json-schema-validator](https://github.com/networknt/json-schema-validator) from 1.5.3 to 1.5.5.
- [Release notes](https://github.com/networknt/json-schema-validator/releases)
- [Changelog](https://github.com/networknt/json-schema-validator/blob/master/CHANGELOG.md)
- [Commits](networknt/json-schema-validator@1.5.3...1.5.5)

---
updated-dependencies:
- dependency-name: com.networknt:json-schema-validator
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: deps(updatecli): Bump updatecli version to v0.93.1 (#3969)

Made with ❤️️ by updatecli

Co-authored-by: elastic-observability-automation[bot] <180520183+elastic-observability-automation[bot]@users.noreply.github.com>

* upgrade java8 log4j to latest release (#3972)

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to d74b1fd (#3973)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump io.micrometer:micrometer-core from 1.14.3 to 1.14.4 (#3976)

Bumps [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) from 1.14.3 to 1.14.4.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.14.3...v1.14.4)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump io.opentelemetry.semconv:opentelemetry-semconv from 1.29.0-alpha to 1.30.0-rc.1 (#3966)

* build: bump io.opentelemetry.semconv:opentelemetry-semconv

Bumps [io.opentelemetry.semconv:opentelemetry-semconv](https://github.com/open-telemetry/semantic-conventions-java) from 1.29.0-alpha to 1.30.0-rc.1.
- [Release notes](https://github.com/open-telemetry/semantic-conventions-java/releases)
- [Changelog](https://github.com/open-telemetry/semantic-conventions-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/semantic-conventions-java/commits/v1.30.0-rc.1)

---
updated-dependencies:
- dependency-name: io.opentelemetry.semconv:opentelemetry-semconv
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* remove usage of now stale semconv attributes

* remove semconv dependency

* code cleanup

* remove leftovers references

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sylvain Juge <[email protected]>

* chore: deps(updatecli): Bump updatecli version to v0.94.1 (#3978)

Made with ❤️️ by updatecli

Co-authored-by: elastic-observability-automation[bot] <180520183+elastic-observability-automation[bot]@users.noreply.github.com>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 0801a43 (#3979)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* pre release: elastic-apm-agent v1.52.2 (#3983)

Co-authored-by: obltmachine <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: elastic-observability-automation[bot] <180520183+elastic-observability-automation[bot]@users.noreply.github.com>
Co-authored-by: obltmachine <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Victor Martinez <[email protected]>
Co-authored-by: Jonas Kunz <[email protected]>
Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
Co-authored-by: Luca Belluccini <[email protected]>
Co-authored-by: jackshirazi <[email protected]>
Co-authored-by: SylvainJuge <[email protected]>
Co-authored-by: César <[email protected]>
Co-authored-by: Renette Ros <[email protected]>
Co-authored-by: Jan Calanog <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
agent-java dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants